| | | Turkojan | [] | win.turkojan | [] | 2021-10-24 | | | |
| | | Ranion | [] | win.ranion | [] | 2021-10-24 | | | |
| | | Lambert | ['GreenLambert'] | osx.lambert | ['Longhorn'] | 2021-10-24 | | | |
| | | ZuRu | [] | osx.zuru | [] | 2021-10-19 | | | |
| | | WireX | [] | apk.wirex | [] | 2021-10-13 | | | |
| | | FontOnLake | [] | elf.fontonlake | [] | 2021-10-11 | | | |
| | | FinFisher | [] | osx.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher | [] | apk.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher | [] | elf.finfisher | [] | 2021-10-08 | | | |
| | | BloodyStealer | [] | win.bloodystealer | [] | 2021-10-05 | | | |
| | | OpenSUpdater | [] | win.opensupdater | [] | 2021-10-01 | | | |
| | | Maxtrilha | [] | win.maxtrilha | [] | 2021-09-14 | | | |
| | | NuggetPhantom | [] | win.nugget_phantom | [] | 2021-09-20 | | | |
| | | Unidentified 085 | [] | win.unidentified_085 | [] | 2021-09-19 | | | |
| | | Capoae | [] | elf.capoae | [] | 2021-09-19 | | | |
| | | goontact | [] | apk.goontact | [] | 2021-09-19 | | | |
| | | pbot | [] | elf.pbot | [] | 2021-09-14 | | | |
| | | CTB Locker | [] | win.ctb_locker | [] | 2021-09-12 | | | |
| | | HabitsRAT | [] | elf.habitsrat | [] | 2021-09-10 | | | |
| | | Haron Ransomware | [] | win.haron | [] | 2021-09-09 | | | |
| | | Vovalex | [] | win.vovalex | [] | 2021-02-06 | | | |
| | | GOTROJ | [] | win.gotroj | ['FIN7'] | 2021-09-02 | | | |
| | | LittleLooter | [] | apk.little_looter | ['Charming Kitten'] | 2021-09-02 | | | |
| | | Vulturi | [] | win.vulturi | [] | 2021-08-31 | | | |
| | | PRISM | ['waterdrop'] | elf.prism | [] | 2021-08-25 | | | |
| | | Triada | [] | apk.triada | [] | 2025-01-14 | | | |
| | | Jeniva | [] | js.jeniva | [] | 2021-08-24 | | | |
| | | Swid | [] | js.swid | [] | 2021-08-24 | | | |
| | | Jetriz | [] | js.jetriz | [] | 2021-08-24 | | | |
| | | Covicli | ['Covically'] | win.covicli | ['MuddyWater'] | 2021-08-17 | | | |
| | | SynAck | [] | win.synack | [] | 2021-08-15 | | | |
| | | BioSet | [] | elf.bioset | [] | 2021-08-11 | | | |
| | | FlyTrap | [] | apk.flytrap | [] | 2021-08-09 | | | |
| | | Venomous | [] | py.venomous | [] | 2021-08-06 | | | |
| | | xCaon | [] | win.xcaon | [] | 2021-08-03 | | | |
| | | Razy | [] | win.razy | [] | 2021-08-03 | | | |
| | | SysKit | ['IvizTech', 'MANGOPUNCH'] | win.syskit | ['APT35', 'Tortoiseshell'] | 2021-07-29 | | | |
| | | Oscorp | ['UBEL'] | apk.oscorp | [] | 2021-07-27 | | | |
| | | BazarNimrod | ['NimzaLoader'] | win.bazarnimrod | [] | 2021-07-27 | | | |
| | | DeepRAT | [] | win.deep_rat | [] | 2021-07-26 | | | |
| | | TerraTV | ['Taurus Loader TeamViewer Module'] | win.terra_tv | ['VENOM SPIDER'] | 2021-07-26 | | | |
| | | Unidentified 083 (AutoIT Stealer) | [] | win.unidentified_083 | [] | 2021-07-21 | | | |
| | | Gasket | [] | win.gasket | [] | 2021-07-21 | | | |
| | | FakeAdBlocker | [] | apk.fakeadblocker | [] | 2021-07-21 | | | |
| | | Unidentified JS 005 (Stealer) | [] | js.unidentified_005 | [] | 2021-07-20 | | | |
| | | RogueRobinNET | [] | win.roguerobin | ['DarkHydrus'] | 2021-07-20 | | | |
| | | PjobRAT | [] | apk.pjobrat | [] | 2021-07-20 | | | |
| | | FakeSpy | [] | apk.fakespy | [] | 2021-07-07 | | | |
| | | AnteFrigus | [] | win.antefrigus | [] | 2020-01-17 | | | |
| | | Nextcry | [] | elf.nextcry | [] | 2019-11-17 | | | |
| | | Cursed Murderer | [] | win.cursed_murderer | [] | 2020-02-10 | | | |
| | | Blackruby | [] | win.blackruby | [] | 2019-08-14 | | | |
| | | CHCH | [] | win.chch | [] | 2019-12-18 | | | |
| | | ChinaJm | [] | win.chinajm | [] | 2020-08-05 | | | |
| | | Eris | [] | win.eris | [] | 2019-10-10 | | | |
| | | OutCrypt | [] | win.outcrypt | [] | 2020-08-05 | | | |
| | | Passlock | [] | win.passlock | [] | 2020-02-10 | | | |
| | | SNC | [] | win.ransomware_snc | [] | 2019-12-11 | | | |
| | | RedRum | ['Grinch', 'Tycoon', 'Thanos'] | win.redrum | [] | 2020-12-23 | | | |
| | | RekenSom | ['GHack Ransomware'] | win.rekensom | [] | 2020-03-22 | | | |
| | | InfoDot | [] | win.infodot | [] | 2020-04-01 | | | |
| | | Jeno | ['Valeria', 'Jest'] | win.jeno | [] | 2020-04-20 | | | |
| | | KEKW | ['KEKW-Locker'] | win.kekw | [] | 2020-03-28 | | | |
| | | Leakthemall | [] | win.leakthemall | [] | 2020-09-15 | | | |
| | | Sadogo | [] | win.sadogo | [] | 2020-04-20 | | | |
| | | WannaRen | [] | win.wannaren | [] | 2020-04-20 | | | |
| | | XP10 | ['FakeChrome Ransomware'] | win.xp10 | [] | 2020-09-15 | | | |
| | | Yarraq | [] | win.yarraq | [] | 2020-01-15 | | | |
| | | Z3 | ['Z3enc Ransomware'] | win.z3 | [] | 2020-09-15 | | | |
| | | Smrss32 | [] | win.smrss32 | [] | 2018-11-19 | | | |
| | | WellMail | [] | elf.wellmail | ['APT 29'] | 2021-06-30 | | | |
| | | NiuB | [] | elf.niub | [] | 2021-06-30 | | | |
| | | POWRUNER | [] | ps1.powruner | ['APT34'] | 2021-06-29 | | | |
| | | QUADAGENT | [] | ps1.quadagent | ['APT34'] | 2021-06-29 | | | |
| | | VALUEVAULT | [] | win.valuevault | ['APT34'] | 2021-06-29 | | | |
| | | MOUSEISLAND | [] | vbs.mouseisland | [] | 2021-06-29 | | | |
| | | Momentum | [] | elf.momentum | [] | 2021-06-29 | | | |
| | | HackSpy | [] | win.hackspy | [] | 2021-06-29 | | | |
| | | Unidentified Linux 001 | [] | elf.unidentified_001 | [] | 2021-06-29 | | | |
| | | MINEBRIDGE | ['GazGolder'] | win.minebridge | [] | 2021-06-29 | | | |
| | | DarkRadiation | [] | elf.dark_radiation | [] | 2021-06-23 | | | |
| | | EpicSplit RAT | [] | jar.epicsplit | [] | 2021-06-22 | | | |
| | | Bundlore | ['SurfBuyer'] | osx.bundlore | [] | 2021-06-23 | | | |
| | | KlingonRAT | [] | win.klingon_rat | [] | 2021-06-21 | | | |
| | | MarkiRAT | [] | win.markirat | [] | 2021-06-21 | | | |
| | | Postlo | [] | ios.postlo | [] | 2021-06-21 | | | |
| | | Responder | ['SpiderLabs Responder'] | py.responder | [] | 2021-06-16 | | | |
| | | Cpuminer | [] | elf.cpuminer | [] | 2021-06-16 | | | |
| | | win.fujinama | [] | win.fujinama | [] | 2021-06-16 | | | |
| | | win.JobCrypter | [] | win.jobcrypter | [] | 2021-06-16 | | | |
| | | Janeleiro | [] | win.janeleiro | [] | 2021-06-16 | | | |
| | | Vadokrist | [] | win.vadokrist | [] | 2021-06-16 | | | |
| | | Kobalos | [] | elf.kobalos | [] | 2021-06-16 | | | |
| | | Facefish | [] | elf.facefish | [] | 2021-06-07 | | | |
| | | Abaddon | [] | win.abaddon | [] | 2020-10-27 | | | |
| | | Ranscam | [] | win.ranscam | [] | 2017-02-15 | | | |
| | | Unidentified 022 (Ransom) | [] | win.unidentified_022_ransom | [] | 2017-04-29 | | | |
| | | ZeroLocker | [] | win.zerolocker | [] | 2019-07-31 | | | |
| | | GnatSpy | [] | apk.gnatspy | ['AridViper'] | 2021-05-26 | | | |
| | | Smackdown | [] | win.smackdown | [] | 2021-05-19 | | | |