AgentTesla

Agent Tesla is a remote access tool (RAT) written in visual basic.

Amadey

Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

AsyncRat

AsyncRAT is designed to remotely monitor and control other computers written in C#.

Modifies security service

Phorphiex payload

Phorphiex, Phorpiex

Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

Remcos

Remcos is a closed-source remote control and surveillance software.

RisePro

RisePro stealer is an infostealer distributed by PrivateLoader.

Stealc

Stealc is an infostealer written in C++.

SystemBC

SystemBC is a proxy and remote administration tool first seen in 2019.

Windows security bypass

Modifies boot configuration data using bcdedit

NirSoft MailPassView

Password recovery tool for various email clients

NirSoft WebBrowserPassView

Password recovery tool for various web browsers

Nirsoft

Command and Scripting Interpreter: PowerShell

Run Powershell and hide display window.

Contacts a large (721) amount of remote hosts

This may indicate a network scan to discover remotely running services.

Downloads MZ/PE file