AgentTesla

Agent Tesla is a remote access tool (RAT) written in visual basic.

Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Contains code to disable Windows Defender

A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

Detect Fabookie payload

Detect Xworm Payload

Fabookie

Fabookie is facebook account info stealer.

Glupteba

Glupteba is a modular loader written in Golang with various components.

Glupteba payload

NanoCore

NanoCore is a remote access tool (RAT) with a variety of capabilities.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

SectopRAT

SectopRAT is a remote access trojan first seen in November 2019.

SectopRAT payload

SmokeLoader

Modular backdoor trojan in use since 2014.

Stealc

Stealc is an infostealer written in C++.

Xworm

Xworm is a remote access trojan written in C#.

Downloads MZ/PE file

Modifies Windows Firewall