AgentTesla

Agent Tesla is a remote access tool (RAT) written in visual basic.

Detect ZGRat V1

Formbook

Formbook is a data stealing malware which is capable of stealing data.

LoaderBot

LoaderBot is a loader written in .NET downloading and executing miners.

PrivateLoader

PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

SmokeLoader

Modular backdoor trojan in use since 2014.

Vidar

Vidar is an infostealer based on Arkei stealer.

ZGRat

ZGRat is remote access trojan written in C#.

Formbook payload

LoaderBot executable

Downloads MZ/PE file

Modifies Windows Firewall

Stops running service(s)