| | | NineRAT | [] | win.ninerat | ['Silent Chollima'] | 2023-12-15 | | | |
| | | TYPEFRAME | [] | win.typeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | SimpleTea | [] | osx.simpletea | ['Lazarus Group'] | 2023-12-19 | | | |
| | | PostNapTea | ['SIGNBT'] | win.postnaptea | ['Lazarus Group'] | 2023-12-19 | | | |
| | | POOLRAT | ['SIMPLESEA'] | osx.poolrat | ['Lazarus Group'] | 2023-12-19 | | | |
| | | ImprudentCook | [] | win.imprudentcook | ['Lazarus Group'] | 2023-12-19 | | | |
| | | miniBlindingCan | ['AIRDRY.V2', 'EventHorizon'] | win.miniblindingcan | ['Lazarus Group'] | 2023-12-19 | | | |
| | | BLINDINGCAN | ['AIRDRY', 'ZetaNile'] | win.blindingcan | ['Lazarus Group'] | 2023-12-19 | | | |
| | | ForestTiger | ['ScoringMathTea'] | win.forest_tiger | ['Lazarus Group'] | 2023-12-19 | | | |
| | | LambLoad | ['OfficeCertTea'] | win.lambload | ['Lazarus Group'] | 2023-12-19 | | | |
| | | WebbyTea | [] | win.webbytea | ['Lazarus Group'] | 2023-12-19 | | | |
| | | 3CX Backdoor | ['SUDDENICON'] | win.3cx_backdoor | ['Lazarus Group'] | 2023-12-19 | | | |
| | | LightlessCan | [] | win.lightlesscan | ['Lazarus Group'] | 2023-12-19 | | | |
| | | SnatchCrypto | ['BackbitingTea'] | win.snatchcrypto | ['Lazarus Group'] | 2023-12-19 | | | |
| | | WinInetLoader | ['LIDSHOT'] | win.wininetloader | ['Lazarus Group'] | 2023-12-19 | | | |
| | | DRATzarus | ['ThreatNeedle'] | win.dratzarus | ['Lazarus Group'] | 2023-12-19 | | | |
| | | WyrmSpy | ['AndroidControl'] | apk.wyrmspy | ['APT41'] | 2023-12-19 | | | |
| | | BianLian | ['Hydra'] | apk.bianlian | [] | 2023-12-19 | | | |
| | | S.O.V.A. | [] | apk.sova | [] | 2023-12-19 | | | |
| | | Rhysida | [] | elf.rhysida | [] | 2023-12-15 | | | |
| | | Meduza Stealer | [] | win.meduza | [] | 2023-12-15 | | | |
| | | HazyLoad | [] | win.hazy_load | [' Silent Chollima'] | 2023-12-15 | | | |
| | | BottomLoader | [] | win.bottomloader | [] | 2023-12-15 | | | |
| | | DLRAT | [] | win.dlrat | [] | 2023-12-15 | | | |
| | | Atharvan | [] | win.atharvan | ['Silent Chollima'] | 2023-12-15 | | | |
| | | Lilith | [] | win.lilith | ['Silent Chollima', 'Tick'] | 2023-12-15 | | | |
| | | Unidentified 100 (APT-Q-12) | [] | win.unidentified_100 | ['APT-Q-12'] | 2023-12-15 | | | |
| | | BADCALL | [] | win.badcall | ['Lazarus Group'] | 2023-12-14 | | | |
| | | IconicStealer | [] | win.iconic_stealer | ['Lazarus Group'] | 2023-12-14 | | | |
| | | BADCALL | [] | elf.badcall | ['Lazarus Group'] | 2023-12-14 | | | |
| | | Krasue RAT | [] | elf.krasue_rat | [] | 2023-12-12 | | | |
| | | Headlace | [] | win.headlace | [] | 2023-12-12 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2023-12-12 | | | |
| | | LuaDream | ['DreamLand'] | win.luadream | [] | 2023-12-12 | | | |
| | | OriginBot | ['OriginBotnet', 'OriginLoader'] | win.originbot | [] | 2023-12-11 | | | |
| | | CageyChameleon | ['Cabbage RAT'] | vbs.cageychameleon | [] | 2023-12-11 | | | |
| | | RustBucket | [] | win.rustbucket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Racket Downloader | [] | win.racket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | GoTitan | [] | elf.gotitan | [] | 2023-12-11 | | | |
| | | miniTypeFrame | [] | win.minitypeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Murofet | [] | win.murofet | [] | 2023-12-11 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | FlyingDutchman | [] | win.flying_dutchman | ['Calypso group'] | 2019-11-12 | | | |
| | | Hunter Stealer | [] | win.hunter | [] | 2020-11-12 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | DarkShell | [] | win.darkshell | [] | 2023-07-24 | | | |
| | | Minodo | [] | win.domino | [] | 2023-10-05 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2023-06-23 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | FunnyDream | [] | win.funny_dream | [] | 2021-12-23 | | | |
| | | Disk Knight | [] | win.disk_knight | [] | 2023-11-13 | | | |
| | | HZ RAT | [] | win.hzrat | [] | 2022-11-18 | | | |
| | | Medusa | [] | win.medusa | [] | 2020-05-11 | | | |
| | | ChChes | ['HAYMAKER', 'Ham Backdoor'] | win.chches | ['Stone Panda'] | 2020-05-23 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | Graphite | [] | win.graphite | ['APT28'] | 2023-11-14 | | | |
| | | BeepService | [] | win.beepservice | [] | 2020-05-27 | | | |
| | | Dorshel | [] | win.dorshel | ['Energetic Bear'] | 2020-04-21 | | | |
| | | BLUELIGHT | [] | win.bluelight | ['APT37'] | 2023-05-24 | | | |
| | | mim221 | [] | win.mim221 | ['Operation Soft Cell'] | 2023-03-27 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2023-11-17 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | BadNews | [] | win.badnews | ['Dropping Elephant'] | 2022-11-28 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | Gameover DGA | [] | win.gameover_dga | [] | 2016-04-18 | | | |
| | | Meow | [] | win.meow | [] | 2023-05-26 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | BleachGap | [] | win.bleachgap | [] | 2022-08-28 | | | |
| | | DYEPACK | ['BanSwift', 'swift'] | win.dyepack | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Enigma Loader | [] | win.enigma_loader | [] | 2023-02-13 | | | |
| | | Graftor | ['MewsSpy'] | win.graftor | [] | 2023-09-28 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2023-07-24 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | GreetingGhoul | [] | win.greetingghoul | [] | 2023-08-03 | | | |
| | | GootKit | ['Waldek', 'Xswkit', 'talalpek'] | win.gootkit | [] | 2023-11-13 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | MicroBackdoor | [] | win.microbackdoor | ['Ghostwriter'] | 2022-08-05 | | | |
| | | FeedLoad | [] | win.feed_load | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Daserf | ['Muirim', 'Nioupale'] | win.daserf | ['Tick'] | 2020-05-23 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | HOPLIGHT | ['HANGMAN'] | win.hoplight | ['Lazarus Group'] | 2020-08-13 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | Cobra Carbon System | ['Carbon'] | win.cobra | ['Turla'] | 2023-05-10 | | | |
| | | Gibberish | [] | win.gibberish | [] | 2020-03-22 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2022-08-08 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | DeltaStealer | [] | win.deltastealer | [] | 2023-06-01 | | | |
| | | Ghole | ['Gholee', 'CoreImpact (Modified)'] | win.ghole | ['Rocket Kitten'] | 2022-04-29 | | | |
| | | Unidentified 061 | [] | win.avrecon | [] | 2019-07-31 | | | |
| | | Credraptor | [] | win.credraptor | ['TeleBots'] | 2021-03-04 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | ['TA505'] | 2022-02-14 | | | |
| | | Atmosphere | [] | win.atmosphere | ['Silence group'] | 2019-05-10 | | | |
| | | HermeticWizard | [] | win.hermeticwizard | [] | 2023-03-20 | | | |
| | | GlobeImposter | ['Fake Globe'] | win.globeimposter | [] | 2023-03-20 | | | |
| | | CryptoMix | ['Azer', 'CryptFile2'] | win.cryptomix | [] | 2023-02-06 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Chinad | [] | win.chinad | [] | 2023-06-01 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2023-05-02 | | | |
| | | GeminiDuke | [] | win.geminiduke | [] | 2022-12-05 | | | |