12817total 515synced today 30APT groups 259families

New samples (30d)

07-25
07-29
08-03
08-08
08-13
08-18
08-23

By APT group

Unattributed
11736
Lazarus
106
MuddyWater
100
SideWinder
100
FIN7
96
APT28
94
APT36
92
APT29
91
APT37
84
Turla
46

By family

Mirai
5461
Vidar
942
Efimer
471
Formbook
461
AgentTesla
371
RemusStealer
371
RemcosRAT
274
ConnectWise
262
CoinMiner
219
ValleyRAT
205
Clear
File APT Family Tags Size Type First seen
60017e193cfd0df017eb8d0cc5f4bfc49593d90430a3e89a287f6afb83672236.rtf SideWinder SideWinder rtfSideWinder 1.6 MB rtf 2024-12-13
4e3c4ea383e6ed5c00672e08adabe24fc142cd05c86830a79c15c90412a2f588.rtf SideWinder SideWinder CVE-2017-11882rtfSideWinder 66 KB rtf 2024-12-13
eeeb99f94029fd366dcde7da2a75a849833c5f5932d8f1412a89ca15b9e9ebb7.docx SideWinder SideWinder docSideWinder 12 KB doc 2024-12-13
c78437acacf9c77699e8cef8c64b33a5e71236c4f7b82a91bc414d2ec2000d9b SideWinder SideWinder jsSideWinder 16 KB js 2024-12-13
SLNA_Updated_Medical_Grant_Application(1).docx SideWinder SideWinder aptdefence-lk-military-bd-orgdocxSidewinder 15 KB docx 2024-12-13
dctooux.exe Turla Amadey AmadeyexeTurlaUKR 1.3 MB exe 2024-12-11
dctooux.exe Turla Amadey AmadeyexeTurlaUKR 437 KB exe 2024-12-11
nnas.ps1 Turla Amadey AmadeyDropperps1TurlaUKR 583 KB ps1 2024-12-11
ceb859610faa19dc898a4d2351e28c84.html APT29 — aptAPT29DropperhtmlNobelium 1.6 MB html 2024-12-05
next.config.js APT38 — APT38InvisibleFerretjsLazarusGroupNorthKorean 6.6 KB js 2024-12-04
force.ps1 APT43 Kimsuky APT43Kimsukyps1 2.3 KB ps1 2024-12-03
start.ps1 APT43 Kimsuky APT43Kimsukyps1 332 B ps1 2024-12-03
log_processlist.ps1 APT43 Kimsuky APT43Kimsukyps1 2.1 KB ps1 2024-12-03
5c13e6.msi MuddyWater AteraAgent AteraAgentmsiMuddyWatersignedTA450 2.9 MB msi 2024-11-28
APT36 LazaSpy.apk APT36 — apkAPT36LazaSpysigned 9.7 MB apk 2024-11-26
DUI70.dll Lazarus Lazarus aptexeLazarus 62 MB exe 2024-11-19
Report.lnk APT28 — apt28lnk 3.3 KB lnk 2024-11-18
localfile~.arm64 Lazarus Lazarus aptlazarusmachosigned 9.6 MB macho 2024-11-14
localfile~.x64 Lazarus Lazarus aptlazarusmachosigned 9.8 MB macho 2024-11-14
AwesomeTemplate Lazarus Lazarus aptlazarusmacho 19 MB macho 2024-11-14
Voov meeting (portable).zip Lazarus Lazarus aptgzlazarus 8.2 MB gz 2024-11-14
3fc65a.msi Lazarus Lazarus Lazarusmsi 1.8 MB msi 2024-11-13
investment-fund.msi MuddyWater — msiMuddyWaterPDQConnectrA4kvxo2signedTA450 4.7 MB msi 2024-11-05
AWS IAM Compliance Check.rdp APT29 — APT29rdp 15 KB rdp 2024-10-25
AWS IAM Configuration.rdp APT29 — APT29rdp 15 KB rdp 2024-10-25
Zero Trust Security Environment Compliance Check.rdp APT29 — APT29rdp 15 KB rdp 2024-10-25
Zero Trust Security Environment Compliance Check(1).rdp APT29 — APT29rdpUNC5837 15 KB rdp 2024-10-25
edeeb6bb575d972ae8d11805eaaaa681.pdf APT28 — APT28pdfUKRukraine.html-5.me 40 KB pdf 2024-10-24
12721952796-107-0_1.ad_toast.html APT37 — APT37CodeOnToastCVE-2024-38178html 17 KB html 2024-10-16
fa95fadc73e5617305a6b71f77e9d255d14402650075107f2272f131d3cf7b00.docx SideWinder SideWinder aptCVE-2017-0199docdocxsidewinder 15 KB doc 2024-10-16
76daea942654d8175f642696fc758b03767db14ca5dda9994797a3f95a34294a.docx SideWinder SideWinder aptCVE-2017-0199docdocxsidewinder 14 KB doc 2024-10-16
RunPEinMemory.exe OilRig — aptAPT34exeOilRig 133 KB exe 2024-10-14
RunPEinMemory.exe APT34 — aptAPT34exeOilRig 133 KB exe 2024-10-14
passwin.dll OilRig — aptAPT34exeOilRig 529 KB exe 2024-10-14
passwin.dll APT34 — aptAPT34exeOilRig 529 KB exe 2024-10-14
Portal.msi MuddyWater RustyStealer msiMuddyWaterPDQConnectrA4kvxo2RustyStealersignedTA450 4.7 MB msi 2024-10-07
ra.zip MuddyWater AteraAgent AteraAgentBoggySerpensMuddyWaterTA450zip 2.6 MB zip 2024-10-07
65cb53.msi MuddyWater RustyStealer ISRmsiMuddyWaterPDQConnectRustyStealersignedTA450 4.7 MB msi 2024-10-06
detail.pdf APT28 — APT28pdfUKR 42 KB pdf 2024-10-02
c4e4332cf78e92bef45cab4d8d9a29a8.msi MuddyWater AteraAgent AteraAgentmsiMuddyWatersignedTA450 2.9 MB msi 2024-10-02
21c0756d52ca7947a83529e2cc7d3341f4626b8da05c256f5ec09034d147c6ba SideWinder SideWinder lnkSideWinder 713 B lnk 2024-09-30
6842aee028eaa07af8e8eba41bef019aee72fe245ca86be39efd2df883b2402c SideWinder SideWinder lnkSideWinder 1.9 KB lnk 2024-09-30
7d1585f9ed317bf06a63bd5aaaf015f6066c51a7153370579b2836d66142f877 SideWinder SideWinder lnkSideWinder 2.0 KB lnk 2024-09-30
ffb1e4d9253ed97cc381826993a8812ac6c53f7a7d01793e282fc148102bdab3 SideWinder SideWinder lnkSideWinder 2.0 KB lnk 2024-09-30
c7139821ee237e7913cb770a67a859e0218c0db6f37b1b778d5ff380a7720a69 SideWinder PureLogsStealer dllPureLogStealerSideWinder 534 KB dll 2024-09-30
profapi.dll SideWinder Havoc aptexeHavocpitb.gov-pkgov.workers.devSideWinderSloppyLemming 122 KB exe 2024-09-26
CRYPTSP.dll SideWinder SideWinder aptexeSideWinderSloppyLemming 2.0 MB exe 2024-09-26
NTGcon.msi MuddyWater — msiMuddyWaterPDQConnectrA4kvxo2signed 4.7 MB msi 2024-09-25
Report on NGO Income_edit.xlsx.lnk APT37 — APT37jumpshare-comlnk 66 KB lnk 2024-09-22
zB564bxDA3yG8PnFR90I.txt APT37 — APT37htmljumpshare-com 488 B html 2024-09-19