CZ Solution Ltd. signed samples of Xtreme Rat, Zeus, Spy-Net, Gh0st, BozokRAT and other

Here are all samples (+ more) mentioned in this post by Fireeye : The Little Signature That Could: The Curious Case of CZ Solution"
All files are digitally signed with a "CZ Solutions" certificate making it easy to create a Yara or ClamAV signature.

A few Zeus samples seem to be still beaconing. Most are sinkholed.
The certificate is now revoked by VeriSign.

Enjoy

Download

Download. Email me if you need the password (new link)

RAT samples from Syrian Targeted attacks - Blackshades RAT, XTreme RAT, Dark Comet RAT used by Syrian Electronic Army

CitizenLab

The CitizenLab published their report of the Blackshades RAT used by Syrian Electronic Army against activists. No need repeat their excellent analysis but you wish to analyze Blackshades and other RAT that were used in the Syrian attacks, here are the samples for 

• Blackshades RAT - June 2012 Citizen Lab Syrian Activists Targeted with BlackShades Spy Software
• XTreme RAT - May 2012  F-Secure Targeted Attacks in Syria
•  Dark Comet RAT - April 2012 - TrendLabs by Nart Villenueve
  

Looks like they are changing their RAT monthly.