AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Darkcomet

DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

Detect Neshta payload

Detect XtremeRAT payload

Detected Gafgyt variant

Gafgyt/Bashlite

IoT botnet with numerous variants first seen in 2014.

Lokibot

Lokibot is a Password and CryptoCoin Wallet Stealer.

Mirai

Mirai is a prevalent Linux malware infecting exposed network devices.

Modifies WinLogon for persistence

Neshta

Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

RuRAT

RuRAT is a remote admin tool sold as legitimate software but regularly abused in malicious phishing campaigns.

Sakula

Sakula is a remote access trojan with various capabilities.

Sakula payload

SectopRAT

SectopRAT is a remote access trojan first seen in November 2019.

SectopRAT payload

SmokeLoader

Modular backdoor trojan in use since 2014.

XtremeRAT

The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

njRAT/Bladabindi

Widely used RAT written in .NET.

Async RAT payload

Renames multiple (105) files with added filename extension

This suggests ransomware activity of encrypting all the files on the system.

Modifies Installed Components in the registry