Netskope Threat Labs

Beast

ATP Sandbox Adv. HeuristicsAV

Beast is a remote access trojan that gives operators extensive control over infected Windows systems, including file management, process control, and surveillance features. The family has circulated for many years, and its builders and variants appear regularly in criminal toolkits. Intrusions that involve Beast typically combine it with credential theft and follow on payloads that deepen the operator's foothold.

First seen
March 2022
Last seen
October 2026
Alert Name
Win32.Exploit.Beast
Win32.Malware.Beast
Win32.Ransomware.Beast
Win32.Trojan.Beast
Win32.Virus.Beast
Win32.Worm.Beast
Win95.Beast.A
Win95.Beast.A:16CA9
Win95.Beast.A:B937B
Win95.Beast.A:F022C