Saturday.

Thursdays, Fridays, Saturdays are the days when the malware is compiled the most often.

It kinda makes sense*.

Who would like to work Sundays and Mondays?**

*remember what they say about statistics 🙂 (data based on 2.5M samples)
**obviously, the APT guys