| | | tsh | ['TINYSHELL'] | elf.tsh | [] | 2025-03-13 | | | |
| | | Anubis Backdoor | [] | py.anubisbackdoor | ['FIN7'] | 2025-03-13 | | | |
| | | KoSpy | [] | apk.kospy | ['APT37'] | 2025-03-13 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-03-12 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-03-12 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-03-12 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-03-12 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-03-12 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-03-12 | | | |
| | | SmartLoader | [] | win.smartloader | [] | 2025-03-12 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2025-03-12 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-03-12 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2025-03-12 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-01-14 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-03-12 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2025-03-12 | | | |
| | | Akira | [] | win.akira | [] | 2025-03-12 | | | |
| | | Akira | [] | elf.akira | [] | 2025-03-11 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-03-11 | | | |
| | | RandomQuery | [] | ps1.randomquery | ['Kimsuky'] | 2025-03-11 | | | |
| | | Moose | [] | elf.moose | [] | 2025-03-10 | | | |
| | | vo1d | [] | apk.vo1d | [] | 2025-03-06 | | | |
| | | QakBot | ['Oakboat', 'Pinkslipbot', 'Qbot', 'Quakbot'] | win.qakbot | ['GOLD CABIN'] | 2025-03-10 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2025-03-10 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2025-03-10 | | | |
| | | Hunters International | [] | win.hunters_international | ['Storm-0501'] | 2025-03-06 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2024-10-25 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-03-10 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-03-10 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-03-10 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2025-03-07 | | | |
| | | lightSpy | [] | ios.lightspy | [] | 2025-03-07 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2025-03-07 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-03-07 | | | |
| | | Qilin | [] | elf.qilin | [] | 2025-03-07 | | | |
| | | Pyramid | [] | py.pyramid | [] | 2025-03-07 | | | |
| | | Stealc | [] | win.stealc | [] | 2025-03-07 | | | |
| | | Simda | ['iBank'] | win.simda | [] | 2025-03-07 | | | |
| | | SparkRAT | [] | win.spark_rat | [] | 2025-03-07 | | | |
| | | Revenge RAT | ['Revetrat'] | win.revenge_rat | ['The Gorgon Group'] | 2025-03-07 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2025-03-07 | | | |
| | | Babuk | [] | elf.babuk | [] | 2025-03-07 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-03-07 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2025-03-07 | | | |
| | | EvilExtractor | [] | win.evilextractor | [] | 2025-03-07 | | | |
| | | Hades | [] | win.hades | ['GOLD WINTER'] | 2025-03-07 | | | |
| | | Phoenix Locker | [] | win.phoenix_locker | [] | 2025-03-07 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2025-03-07 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-03-07 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-03-07 | | | |
| | | Unidentified 103 (FIN8) | ['Ragnar Loader', 'Sardonic'] | win.unidentified_103 | [] | 2025-03-06 | | | |
| | | XWorm | [] | win.xworm | [] | 2025-03-06 | | | |
| | | NailaoLocker | [] | win.nailao_locker | [] | 2025-03-05 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | [] | 2025-03-05 | | | |
| | | Loki RAT | [] | py.lokirat | ['El Machete'] | 2025-03-05 | | | |
| | | I2PRAT | ['I2Parcae'] | win.i2prat | [] | 2025-03-05 | | | |
| | | Unidentified 118 | [] | win.unidentified_118 | [] | 2025-03-05 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | [] | 2025-03-05 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2025-03-05 | | | |
| | | MintStealer | [] | win.mintstealer | [] | 2025-03-05 | | | |
| | | ReedBed | [] | win.reedbed | [] | 2025-03-05 | | | |
| | | Cactus | [] | win.cactus | [] | 2025-03-05 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2025-03-05 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2025-03-05 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-03-05 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-02-17 | | | |
| | | Cuba | ['COLDDRAW'] | win.cuba | [] | 2025-03-05 | | | |
| | | FINALDRAFT | [] | elf.finaldraft | [] | 2025-02-28 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-02-28 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-02-28 | | | |
| | | PANIX | [] | sh.panix | [] | 2025-02-28 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-02-28 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2025-02-28 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-02-28 | | | |
| | | Cyclops | [] | win.cyclops | [] | 2025-02-28 | | | |
| | | AllaSenha | [] | win.allasenha | [] | 2025-02-28 | | | |
| | | Turla RAT | [] | elf.turla_rat | [] | 2025-02-28 | | | |
| | | HiddenWasp | [] | elf.hiddenwasp | [] | 2025-02-28 | | | |
| | | EvilGnome | [] | elf.evilgnome | ['Gamaredon Group'] | 2025-02-28 | | | |
| | | OceanLotus | [] | osx.oceanlotus | ['APT32'] | 2025-02-28 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2025-02-28 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2025-02-28 | | | |
| | | StegoLoader | [] | win.stegoloader | [] | 2025-02-28 | | | |
| | | DuQu | [] | win.duqu | ['Unit 8200'] | 2025-02-28 | | | |
| | | Nanocore RAT | ['Nancrat', 'NanoCore'] | win.nanocore | ['APT33', 'The Gorgon Group'] | 2025-02-28 | | | |
| | | RedTail | [] | elf.redtail | [] | 2025-02-28 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2025-02-28 | | | |
| | | RAWDOOR | [] | win.rawdoor | ['APT31'] | 2025-02-28 | | | |
| | | AllaKore | [] | win.allakore | [] | 2025-02-28 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2025-02-28 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-02-28 | | | |
| | | BellaCiao | [] | win.bellaciao | [] | 2025-02-28 | | | |
| | | xmrig | [] | win.xmrig | [] | 2025-02-28 | | | |
| | | r77 | ['r77 Rootkit'] | win.r77 | [] | 2025-02-28 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-02-28 | | | |
| | | Behinder | [] | php.behinder | [] | 2025-02-28 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2025-02-28 | | | |
| | | LCRYX | [] | vbs.lcryx | [] | 2025-02-26 | | | |
| | | Hermes | [] | win.hermes | ['Lazarus Group'] | 2025-02-26 | | | |