| | | Loki Password Stealer (PWS) | ['Burkina', 'Loki', 'LokiBot', 'LokiPWS'] | win.lokipws | ['SWEED', 'The Gorgon Group', 'Cobalt'] | 2024-03-04 | | | |
| | | FudModule | ['LIGHTSHOW'] | win.fudmodule | ['Lazarus Group'] | 2024-03-04 | | | |
| | | ZarDoor | [] | win.zardoor | [] | 2024-03-04 | | | |
| | | Venom Proxy | [] | win.venom_proxy | [] | 2024-03-04 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2024-03-04 | | | |
| | | HTran | ['HUC Packet Transmit Tool'] | win.htran | ['GALLIUM', 'UPS'] | 2024-03-04 | | | |
| | | GTPDOOR | [] | win.gtpdoor | ['LightBasin'] | 2024-03-04 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2024-03-04 | | | |
| | | WINELOADER | [] | win.wineloader | ['APT29'] | 2024-03-04 | | | |
| | | Trigona | [] | win.trigona | [] | 2024-03-04 | | | |
| | | 9002 RAT | ['McRAT', 'Hydraq', 'HOMEUNIX'] | win.9002 | ['Aurora Panda', 'APT31', 'Group 27'] | 2024-03-04 | | | |
| | | Spyder | [] | win.spyder | [] | 2024-03-04 | | | |
| | | Phemedrone Stealer | ['Ov3r_Stealer'] | win.phemedrone_stealer | [] | 2024-03-04 | | | |
| | | WikiLoader | ['WailingCrab'] | win.wikiloader | [] | 2024-03-04 | | | |
| | | MooBot | [] | elf.moobot | [] | 2024-02-28 | | | |
| | | DoorMe | [] | win.doorme | [] | 2024-02-28 | | | |
| | | CatB | [] | win.catb | [] | 2024-02-28 | | | |
| | | GIMMICK | [] | win.gimmick | [] | 2024-02-28 | | | |
| | | Hook | [] | apk.hook | [] | 2024-02-28 | | | |
| | | Hydra | [] | apk.hydra | [] | 2024-02-28 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2024-02-28 | | | |
| | | Grandoreiro | [] | win.grandoreiro | [] | 2024-02-28 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2024-02-23 | | | |
| | | PEBBLEDASH | [] | win.pebbledash | [] | 2024-02-22 | | | |
| | | DICELOADER | ['Lizar'] | win.diceloader | [] | 2023-12-12 | | | |
| | | HTTP-Shell | [] | ps1.http_shell | [] | 2024-02-22 | | | |
| | | Konni | [] | win.konni | ['APT37'] | 2024-02-21 | | | |
| | | Oderoor | ['Bobax', 'Kraken'] | win.oderoor | [] | 2024-02-21 | | | |
| | | BianLian | [] | win.bianlian | [] | 2024-02-21 | | | |
| | | BianLian | [] | elf.bianlian | [] | 2024-02-21 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2024-02-08 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2024-02-16 | | | |
| | | GootLoader | [] | js.gootloader | [] | 2024-02-16 | | | |
| | | Maze | ['ChaCha'] | win.maze | ['FIN6', 'TA2101'] | 2024-02-16 | | | |
| | | Egregor | [] | win.egregor | [] | 2024-02-16 | | | |
| | | SnappyTCP | [] | elf.snappy_tcp | ['Sea Turtle'] | 2024-02-15 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['GOLD CABIN', 'TA578', 'TA579'] | 2024-02-15 | | | |
| | | TrickBot | ['Trickster', 'TheTrick', 'TrickLoader'] | win.trickbot | ['TA505', 'UNC1878', 'WIZARD SPIDER'] | 2024-02-15 | | | |
| | | Godzilla Loader | [] | win.godzilla_loader | [] | 2024-02-15 | | | |
| | | DarkMe | [] | win.darkme | [] | 2024-02-14 | | | |
| | | Azorult | ['PuffStealer', 'Rultazo'] | win.azorult | ['The Gorgon Group'] | 2024-02-13 | | | |
| | | Rhysida | [] | win.rhysida | [] | 2024-02-13 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2024-02-13 | | | |
| | | Ranbyus | [] | win.ranbyus | [] | 2024-02-13 | | | |
| | | Dot Ransomware | ['MZP Ransomware'] | win.dot_ransomware | [] | 2024-02-09 | | | |
| | | Konni | [] | apk.konni | [] | 2024-02-09 | | | |
| | | Kinsing | ['h2miner'] | elf.kinsing | [] | 2024-02-09 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2024-02-09 | | | |
| | | AlphaLocker | [] | win.alphalocker | [] | 2024-02-09 | | | |
| | | KV | [] | sh.kv | ['Volt Typhoon'] | 2024-02-09 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2024-02-09 | | | |
| | | Troll Stealer | [] | win.troll_stealer | ['Kimsuky'] | 2024-02-09 | | | |
| | | AlphaSeed | [] | win.alphaseed | ['Kimsuky'] | 2024-02-09 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2024-02-09 | | | |
| | | NSPX30 | [] | win.nspx30 | [] | 2024-02-08 | | | |
| | | Subzero | ['Corelump', 'Jumplump'] | win.subzero | [] | 2024-02-08 | | | |
| | | PolyVice | ['Chily'] | win.polyvice | [] | 2024-02-08 | | | |
| | | Cactus | [] | win.cactus | [] | 2024-02-08 | | | |
| | | PhonyC2 | [] | ps1.phonyc2 | ['MuddyWater'] | 2024-02-08 | | | |
| | | SiennaBlue | ['HolyLocker', 'H0lyGh0st'] | win.sienna_blue | [] | 2024-02-08 | | | |
| | | Maui Ransomware | [] | win.maui | ['Silent Chollima'] | 2024-02-08 | | | |
| | | SiennaPurple | ['HolyLocker', 'H0lyGh0st'] | win.sienna_purple | [] | 2024-02-08 | | | |
| | | Akira | [] | win.akira | [] | 2024-02-08 | | | |
| | | Akira | [] | elf.akira | [] | 2024-02-08 | | | |
| | | 8Base | [] | win.8base | [] | 2024-02-08 | | | |
| | | HijackLoader | ['GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2024-02-08 | | | |
| | | TriangleDB | [] | ios.triangledb | [] | 2024-02-08 | | | |
| | | OpGhoul | [] | win.opghoul | [] | 2024-02-08 | | | |
| | | Bahamut | [] | apk.bahamut | ['Bahamut', 'Dropping Elephant'] | 2024-02-08 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | ScanLine | [] | win.scanline | ['Volt Typhoon'] | 2024-02-08 | | | |
| | | BOLDMOVE | [] | elf.boldmove | [] | 2024-02-07 | | | |
| | | CruLoader | [] | win.cruloader | [] | 2024-02-06 | | | |
| | | Unidentified 074 (Downloader) | [] | win.unidentified_074 | [] | 2024-02-06 | | | |
| | | 5.t Downloader | [] | win.5t_downloader | [] | 2024-02-06 | | | |
| | | Socks5 Systemz | [] | win.socks5_systemz | [] | 2024-02-05 | | | |
| | | SUBTLE-PAWS | [] | ps1.subtle_paws | [] | 2024-02-05 | | | |
| | | Mortis | [] | win.mortis | [] | 2024-02-05 | | | |
| | | HemiGate | [] | win.hemigate | ['Earth Estries'] | 2024-02-02 | | | |
| | | Chaes | [] | win.chaes | [] | 2024-02-02 | | | |
| | | Unidentified 114 (APT28 InfoStealer) | [] | win.unidentified_114 | ['APT28'] | 2024-02-02 | | | |
| | | Mocky LNK | [] | win.mocky_lnk | ['APT28'] | 2024-02-02 | | | |
| | | ProjectWood | [] | win.project_wood | [] | 2024-02-02 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | GroundPeony | [] | win.ground_peony | [] | 2024-02-02 | | | |
| | | DracuLoader | [] | win.dracu_loader | [] | 2024-02-02 | | | |
| | | CherryLoader | [] | win.cherryloader | [] | 2024-02-02 | | | |
| | | Kasseika | [] | win.kasseika | [] | 2024-02-02 | | | |
| | | PurpleFox | [] | win.purplefox | [] | 2024-02-02 | | | |
| | | Nevada | [] | win.nevada | [] | 2024-02-02 | | | |
| | | BOOMBOX | [] | win.boombox | ['APT29'] | 2024-02-02 | | | |
| | | VaporRage | ['BOOMMIC'] | win.vapor_rage | ['APT29'] | 2024-02-02 | | | |
| | | EnvyScout | ['ROOTSAW'] | win.envyscout | [] | 2024-02-02 | | | |
| | | Unidentified 099 (APT29 Dropbox Loader) | [] | win.unidentified_099 | ['APT29'] | 2024-02-02 | | | |
| | | BEATDROP | [] | win.beatdrop | ['APT29'] | 2024-02-02 | | | |
| | | T34loader | [] | win.t34loader | [] | 2024-02-02 | | | |
| | | VileRAT | [] | py.vilerat | [] | 2024-02-02 | | | |
| | | TargetCompany | ['Fargo', 'Mallox', 'Tohnichi'] | win.targetcompany | [] | 2024-02-02 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2024-02-02 | | | |
| | | Magniber | [] | win.magniber | [] | 2024-01-31 | | | |