| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-06-04 | | | |
| | | INCONTROLLER | ['PIPEDREAM'] | win.incontroller | [] | 2025-06-11 | | | |
| | | Crocodilus | [] | apk.crocodilus | [] | 2025-06-11 | | | |
| | | Antidot | [] | apk.antidot | [] | 2025-06-11 | | | |
| | | TrickMo | [] | apk.trickmo | [] | 2025-06-11 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2025-06-11 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-06-11 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2025-06-11 | | | |
| | | BabyShark | ['LATEOP'] | win.babyshark | ['Kimsuky'] | 2025-06-11 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2025-06-11 | | | |
| | | FlowerPower | ['BoBoStealer'] | ps1.flowerpower | ['Kimsuky'] | 2025-06-11 | | | |
| | | Amatera | [] | win.amatera | [] | 2025-06-11 | | | |
| | | elf.iocontrol | ['OrpraCab', 'QueueCat'] | elf.iocontrol | ['Cyber Av3ngers'] | 2025-06-11 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-06-11 | | | |
| | | XWorm | [] | win.xworm | [] | 2025-06-11 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2025-06-06 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-05-21 | | | |
| | | MiyaRAT | [] | win.miya_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | ZxxZ | ['MuuyDownloader'] | win.zxxz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | BDarkRAT | [] | win.bdark_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | AlmondRAT | [] | win.almond_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | AlmondRAT | [] | win.almondrat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-06-05 | | | |
| | | WmRAT | [] | win.wm_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | ORPCBackdoor | [] | win.orpcbackdoor | [] | 2025-06-05 | | | |
| | | KiwiStealer | [] | win.kiwistealer | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | KugelBlitz | [] | win.kugelblitz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2025-06-05 | | | |
| | | PathWiper | [] | win.pathwiper | [] | 2025-06-05 | | | |
| | | BPFDoor | ['JustForFun'] | elf.bpfdoor | ['Red Menshen'] | 2025-06-05 | | | |
| | | SpyMax | [] | apk.spymax | [] | 2025-06-05 | | | |
| | | FTCODE | [] | ps1.ftcode | [] | 2025-06-05 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-06-04 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2025-06-04 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-06-04 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-06-04 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-06-04 | | | |
| | | Conti | ['Conti Locker'] | elf.conti | [] | 2025-06-04 | | | |
| | | PULSEPACK | [] | win.pulsepack | [] | 2025-06-03 | | | |
| | | BypassBoss | [] | win.bypassboss | [] | 2025-06-03 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-06-03 | | | |
| | | Vshell | [] | win.vshell | [] | 2025-06-03 | | | |
| | | STOWAWAY | [] | win.stowaway | [] | 2025-06-03 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-06-03 | | | |
| | | EagerBee | [] | win.eagerbee | [] | 2025-06-03 | | | |
| | | TOUGHPROGRESS | [] | win.toughprogress | ['APT41'] | 2025-06-02 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2025-06-02 | | | |
| | | PumaBot | [] | elf.pumabot | [] | 2025-06-02 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-06-02 | | | |
| | | Venom RAT | [] | win.venom | [] | 2025-06-02 | | | |
| | | ISFB | ['Gozi ISFB', 'IAP', 'Pandemyia'] | win.isfb | ['GOLD CABIN'] | 2025-06-02 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2025-06-02 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-06-02 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2025-06-02 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-06-02 | | | |
| | | EDDIESTEALER | [] | win.eddiestealer | [] | 2025-06-02 | | | |
| | | Unidentified 093 (Sidewinder) | [] | win.unidentified_093 | ['RAZOR TIGER'] | 2025-06-02 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2025-06-02 | | | |
| | | DOUBLELOADER | [] | win.doubleloader | [] | 2025-06-02 | | | |
| | | Maze | ['ChaCha'] | win.maze | ['FIN6', 'TA2101'] | 2025-05-28 | | | |
| | | More_eggs | ['SpicyOmelette', 'SKID'] | js.more_eggs | ['Cobalt', 'FIN6', 'VENOM SPIDER'] | 2025-05-28 | | | |
| | | Stealc | [] | win.stealc | [] | 2025-05-28 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-05-28 | | | |
| | | SafePay | [] | win.safepay | [] | 2025-05-28 | | | |
| | | CHERRYSPY | [] | py.cherryspy | ['UAC-0063'] | 2025-05-26 | | | |
| | | HATVIBE | [] | vbs.hatvibe | ['UAC-0063'] | 2025-05-26 | | | |
| | | Tetra Loader | [] | win.tetra_loader | [] | 2025-05-26 | | | |
| | | BTMOB RAT | [] | apk.btmob | [] | 2025-05-26 | | | |
| | | Careto | ['Mask', 'Appetite'] | osx.careto | [] | 2025-05-26 | | | |
| | | Careto | ['TheMask'] | win.careto | ['Careto'] | 2025-05-26 | | | |
| | | Gremlin | [] | win.gremlin | [] | 2025-05-26 | | | |
| | | Statc | ['Statc Stealer', 'Static Stealer'] | win.statc | [] | 2025-05-23 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2025-05-26 | | | |
| | | AIRASHI | [] | elf.airashi | [] | 2025-05-26 | | | |
| | | Szribi | ['Srizbi'] | win.szribi | [] | 2025-05-26 | | | |
| | | Sarcoma | [] | win.sarcoma | [] | 2025-05-23 | | | |
| | | PEBBLEDASH | [] | win.pebbledash | [] | 2025-05-23 | | | |
| | | Aurotun Stealer | [] | win.aurotun_stealer | [] | 2025-05-23 | | | |
| | | DarkCloud Stealer | [] | win.darkcloud | [] | 2025-05-23 | | | |
| | | Moriya | [] | win.moriya | [] | 2025-05-22 | | | |
| | | TerraStealer | ['StealerOne', 'SONE', 'Taurus Loader Stealer Module'] | win.terra_stealer | ['VENOM SPIDER', 'FIN6'] | 2025-05-12 | | | |
| | | KRNRAT | [] | win.krnrat | [] | 2025-05-22 | | | |
| | | Pterois | [] | win.pterois | ['Swan Vector'] | 2025-05-28 | | | |
| | | Akemi | [] | jar.akemi | [] | 2025-05-22 | | | |
| | | Unidentified 122 (Stealer) | [] | win.unidentified_122 | [] | 2025-05-22 | | | |
| | | Headlace | [] | win.headlace | [] | 2025-05-22 | | | |
| | | STEELHOOK | [] | ps1.steelhook | ['APT28'] | 2025-05-22 | | | |
| | | MASEPIE | [] | py.masepie | ['APT28'] | 2025-05-22 | | | |
| | | Geost | [] | apk.geost | [] | 2025-04-25 | | | |
| | | Murofet | ['Licat'] | win.murofet | [] | 2024-09-04 | | | |
| | | ScoutC2 | [] | win.scoutc2 | [] | 2025-05-21 | | | |
| | | AndroxGh0st | ['AndroxGhost', 'Androx'] | py.androxgh0st | ['Xcatze'] | 2025-05-21 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2025-05-21 | | | |
| | | WebMonitor RAT | ['RevCode'] | win.webmonitor | [] | 2020-11-19 | | | |
| | | WRECKSTEEL | [] | ps1.wrecksteel | [] | 2025-05-21 | | | |
| | | StrelaStealer | [] | win.strelastealer | [] | 2025-05-21 | | | |
| | | ZXShell | ['Sensocode'] | win.zxshell | ['APT41', 'EMISSARY PANDA', 'Leviathan'] | 2025-05-21 | | | |
| | | Poison Ivy | ['SPIVY', 'pivy', 'poisonivy'] | win.poison_ivy | ['GALLIUM', 'Molerats', 'Mustang Panda', 'Nightshade Panda', 'Pirate Panda', 'Stone Panda', 'TA428', 'Temper Panda'] | 2025-05-21 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-04-27 | | | |
| | | GolangGhost | [] | osx.golangghost | [] | 2025-05-21 | | | |