| | | Vizom | [] | win.vizom | [] | 2020-10-23 | | | |
| | | IXWare | [] | win.ixware | [] | 2020-10-19 | | | |
| | | Blue Banana RAT | [] | jar.bluebanana | [] | 2020-10-13 | | | |
| | | Bahamut | [] | win.bahamut | [] | 2020-10-08 | | | |
| | | DoubleFantasy | [] | elf.doublefantasy | ['Equation Group'] | 2020-10-05 | | | |
| | | Grinju Downloader | [] | vbs.grinju | [] | 2020-10-05 | | | |
| | | SpyC23 | [] | apk.spyc23 | ['AridViper'] | 2020-10-04 | | | |
| | | PyArk | [] | py.pyark | ['El Machete'] | 2020-10-02 | | | |
| | | LazyCat | [] | win.lazycat | ['Leviathan'] | 2020-09-25 | | | |
| | | SSHNET | [] | win.sshnet | [] | 2020-09-18 | | | |
| | | Lucifer | [] | win.lucifer | [] | 2020-09-18 | | | |
| | | LuckyCat | [] | apk.luckycat | ['TA413'] | 2020-09-16 | | | |
| | | Exile RAT | [] | win.exilerat | ['TA413'] | 2020-09-16 | | | |
| | | CDRThief | [] | elf.cdrthief | [] | 2020-09-15 | | | |
| | | NixScare Stealer | [] | win.nixscare | [] | 2020-09-15 | | | |
| | | KryptoCibule | [] | win.kryptocibule | [] | 2020-09-03 | | | |
| | | Masad Stealer | [] | win.masad_stealer | [] | 2020-09-03 | | | |
| | | ThiefBot | [] | apk.thiefbot | [] | 2020-09-02 | | | |
| | | Cetus | [] | elf.cetus | [] | 2020-08-31 | | | |
| | | ThinMon | [] | win.thinmon | ['DarkHotel'] | 2020-08-25 | | | |
| | | LiquorBot | [] | elf.liquorbot | [] | 2020-01-13 | | | |
| | | PowerZure | [] | ps1.powerzure | [] | 2020-08-18 | | | |
| | | GOSH | [] | elf.gosh | [] | 2020-08-18 | | | |
| | | ZooPark | [] | apk.zoopark | [] | 2020-08-13 | | | |
| | | ATANK | [] | apk.atank | [] | 2020-08-12 | | | |
| | | Baldr | ['Baldir'] | win.baldr | [] | 2019-08-07 | | | |
| | | Decebal | [] | win.decebal | [] | 2018-04-26 | | | |
| | | Tsifiri | [] | win.tsifiri | [] | 2016-05-10 | | | |
| | | Unidentified 038 | [] | win.unidentified_038 | [] | 2017-11-16 | | | |
| | | Luzo | [] | win.luzo | [] | 2016-05-31 | | | |
| | | SNS Locker | [] | win.snslocker | [] | 2016-06-02 | | | |
| | | Lamdelin | [] | win.lamdelin | [] | 2018-04-12 | | | |
| | | lockscreen | [] | vbs.lockscreen | [] | 2020-07-30 | | | |
| | | Casso | [] | osx.casso | ['Lazarus Group'] | 2020-07-30 | | | |
| | | DEFENSOR ID | ['Defensor Digital'] | apk.defensor_id | [] | 2020-07-30 | | | |
| | | Ensikology | ['Ensiko'] | php.ensikology | [] | 2020-07-30 | | | |
| | | CryptoDarkRubix | ['Ranet'] | win.cryptodarkrubix | [] | 2020-07-30 | | | |
| | | TerraRecon | ['Taurus Loader Reconnaissance Module'] | win.terra_recon | ['VENOM SPIDER'] | 2020-07-24 | | | |
| | | OilRig | [] | ps1.oilrig | ['OilRig', 'APT39', 'Chafer'] | 2020-07-23 | | | |
| | | Eventbot | [] | apk.eventbot | [] | 2020-07-16 | | | |
| | | BigViktor | [] | elf.bigviktor | [] | 2020-07-15 | | | |
| | | DoubleAgent | [] | apk.doubleagent | ['HenBox'] | 2020-07-15 | | | |
| | | GoldenEagle | [] | apk.goldeneagle | ['HenBox'] | 2020-07-15 | | | |
| | | SilkBean | [] | apk.silkbean | ['HenBox'] | 2020-07-15 | | | |
| | | CarbonSteal | [] | apk.carbonsteal | ['HenBox'] | 2020-07-15 | | | |
| | | Almanahe | [] | win.almanahe | [] | 2020-07-15 | | | |
| | | BadPatch | ['WelcomeChat'] | apk.badpatch | ['Molerats'] | 2020-07-15 | | | |
| | | Melcoz | [] | win.melcoz | [] | 2020-07-15 | | | |
| | | POWERTON | [] | ps1.powerton | ['APT33'] | 2020-07-15 | | | |
| | | Crossrider | [] | osx.crossrider | [] | 2018-05-11 | | | |
| | | Zacinlo | ['s5mark'] | win.zacinlo | [] | 2020-07-08 | | | |
| | | GoGoogle | ['BossiTossi'] | win.gogoogle | [] | 2020-07-07 | | | |
| | | LALALA Stealer | [] | win.lalala_stealer | [] | 2020-06-30 | | | |
| | | ANTAK | [] | php.antak | ['APT39', 'Anunak'] | 2020-06-25 | | | |
| | | POWERPIPE | [] | ps1.powerpipe | ['Anunak'] | 2020-06-25 | | | |
| | | HALFBAKED | [] | vbs.halfbaked | ['Anunak'] | 2020-06-25 | | | |
| | | FTCODE | [] | ps1.ftcode | [] | 2020-06-24 | | | |
| | | Schtasks | [] | ps1.schtasks | [] | 2020-06-19 | | | |
| | | troystealer | [] | win.troystealer | [] | 2020-06-17 | | | |
| | | FRat | [] | win.frat | [] | 2020-06-12 | | | |
| | | FRat Loader | [] | ps1.frat_loader | [] | 2020-06-12 | | | |
| | | PoisonCarp | ['INSOMNIA'] | ios.poisoncarp | ['POISON CARP'] | 2020-06-12 | | | |
| | | jRAT | ['Jacksbot'] | jar.jrat | [] | 2020-06-08 | | | |
| | | Octopus Scanner | [] | jar.octopus_scanner | [] | 2020-06-08 | | | |
| | | Coronavirus Android Worm | [] | apk.corona_worm | [] | 2020-03-27 | | | |
| | | Loerbas | [] | elf.loerbas | [] | 2020-05-18 | | | |
| | | KeyBase | ['Kibex'] | win.keybase | [] | 2019-02-08 | | | |
| | | GGLdr | [] | vbs.ggldr | [] | 2020-05-27 | | | |
| | | RatSnif | [] | win.ratsnif | ['APT32'] | 2020-05-23 | | | |
| | | TalentRAT | ['Assassin RAT'] | apk.talent_rat | [] | 2020-05-23 | | | |
| | | owaauth | ['luckyowa'] | win.owaauth | [] | 2020-05-23 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2020-05-23 | | | |
| | | AIRBREAK | ['Orz'] | js.airbreak | ['Leviathan'] | 2020-05-23 | | | |
| | | Binanen | [] | win.binanen | [] | 2020-05-23 | | | |
| | | Sorano | [] | win.sorano | [] | 2020-05-20 | | | |
| | | LeetHozer | [] | elf.leethozer | [] | 2020-05-20 | | | |
| | | Dendroid | [] | apk.dendroid | [] | 2020-05-20 | | | |
| | | XServer | ['Filesnfer'] | win.xserver | ['UPS', 'Violin Panda'] | 2020-05-19 | | | |
| | | CloudAtlas | [] | apk.cloudatlas | ['Inception Framework'] | 2020-05-18 | | | |
| | | RemoteAdmin | [] | win.remoteadmin | [] | 2020-05-18 | | | |
| | | Adzok | [] | jar.adzok | ['Packrat'] | 2020-05-18 | | | |
| | | WatchBog | [] | elf.watchbog | [] | 2020-05-18 | | | |
| | | kerberods | [] | elf.kerberods | ['Rocke'] | 2020-05-18 | | | |
| | | Qealler | ['Pyrogenic Infostealer'] | jar.qealler | [] | 2020-05-18 | | | |
| | | Mandrake | [] | apk.mandrake | [] | 2020-05-14 | | | |
| | | Titan | [] | apk.titan | ['Pirate Panda'] | 2018-10-09 | | | |
| | | NodeRAT | [] | js.node_rat | ['Tick'] | 2020-05-13 | | | |
| | | goCryptoLocker | [] | win.gocryptolocker | [] | 2020-05-02 | | | |
| | | win.unidentified_059 | [] | win.unidentified_059 | [] | | | | |
| | | FireBird RAT | [] | win.firebird_rat | [] | 2020-03-13 | | | |
| | | WannaRen Downloader | [] | ps1.wannaren_loader | [] | 2020-05-05 | | | |
| | | Hupigon | [] | win.hupigon | [] | 2020-05-02 | | | |
| | | WinPot | ['ATMPot'] | win.winpot | [] | 2020-04-26 | | | |
| | | Filerase | [] | win.filerase | ['APT33'] | 2020-04-21 | | | |
| | | Sorgu | [] | win.sorgu | ['Leafminer'] | 2020-04-21 | | | |
| | | Imecab | [] | win.imecab | ['Leafminer'] | 2020-04-21 | | | |
| | | Unidentified JS 003 (Emotet Downloader) | [] | js.unidentified_003 | ['MUMMY SPIDER'] | 2020-04-14 | | | |
| | | IoT Reaper | ['IoTroop', 'Reaper', 'iotreaper'] | elf.iot_reaper | [] | 2020-04-13 | | | |
| | | Starfighter | [] | vbs.starfighter | [] | 2020-04-07 | | | |
| | | Starfighter | [] | js.starfighter | [] | 2020-04-07 | | | |