Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Detect Lumma Stealer payload V2

Detect Lumma Stealer payload V4

Detect Xworm Payload

Lumma Stealer

An infostealer written in C++ first seen in August 2022.

PureLog Stealer

PureLog Stealer is an infostealer written in C#.

PureLog Stealer payload

Quasar RAT

Quasar is an open source Remote Access Tool.

Quasar payload

Raccoon

Raccoon is an infostealer written in C++ and first seen in 2019.

Raccoon Stealer V2 payload

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

SectopRAT

SectopRAT is a remote access trojan first seen in November 2019.

SectopRAT payload

Vidar

Vidar is an infostealer based on Arkei stealer.

WarzoneRat, AveMaria

WarzoneRat is a native RAT developed in C++ with multiple plugins sold as a MaaS.

Windows security bypass

Xworm

Xworm is a remote access trojan written in C#.

Async RAT payload

Warzone RAT payload

Command and Scripting Interpreter: PowerShell

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

Creates new service(s)

Downloads MZ/PE file

Stops running service(s)