Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Detect Vidar Stealer

Detect Xworm Payload

Detect ZGRat V1

Phorphiex

Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

PureLog Stealer

PureLog Stealer is an infostealer written in C#.

PureLog Stealer payload

Raccoon

Raccoon is an infostealer written in C++ and first seen in 2019.

Raccoon Stealer V2 payload

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

RisePro

RisePro stealer is an infostealer distributed by PrivateLoader.

SectopRAT

SectopRAT is a remote access trojan first seen in November 2019.

SectopRAT payload

Stealc

Stealc is an infostealer written in C++.

Vidar

Vidar is an infostealer based on Arkei stealer.

Windows security bypass

XMRig Miner payload

Xworm

Xworm is a remote access trojan written in C#.

ZGRat

ZGRat is remote access trojan written in C#.

xmrig

XMRig is a high performance, open source, cross platform CPU/GPU miner.

Async RAT payload

Blocklisted process makes network request

Downloads MZ/PE file

Modifies Windows Firewall

Sets file execution options in registry

Stops running service(s)