| | | 7ev3n | [] | win.7ev3n | [] | 2018-01-23 | | | |
| | | 8.t Dropper | [u'8t_dropper'] | win.8t_dropper | [] | 2019-07-31 | | | |
| | | 9002 RAT | [u'McRAT', u'Hydraq', u'HOMEUNIX'] | win.9002 | [u'Aurora Panda', u'APT31', u'Group 27'] | 2019-05-26 | | | |
| | | AbaddonPOS | [u'PinkKite'] | win.abaddon_pos | [] | 2018-10-18 | | | |
| | | abantes | [] | win.abantes | [] | 2018-10-18 | | | |
| | | Abbath Banker | [] | win.abbath_banker | [] | 2016-12-28 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | AdamLocker | [] | win.adam_locker | [] | 2018-01-04 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdultSwine | [] | apk.adultswine | [] | 2018-01-23 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2018-08-31 | | | |
| | | AdWind | [u'AlienSpy', u'JSocket', u'Frutas', u'UNRECOM', u'JBifrost', u'Sockrat'] | jar.adwind | [] | 2019-05-30 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2017-05-18 | | | |
| | | Agent Tesla | [] | win.agent_tesla | [u'SWEED'] | 2019-07-31 | | | |
| | | Agent.BTZ | [u'ComRAT', u'Sun rootkit'] | win.agent_btz | [u'Turla Group'] | 2017-09-20 | | | |
| | | AIRBREAK | [u'Orz'] | js.airbreak | [u'Leviathan'] | 2019-03-19 | | | |
| | | Aldibot | [] | win.aldibot | [] | 2018-09-19 | | | |
| | | Alina POS | [u'alina_spark', u'katrina', u'alina_eagle'] | win.alina_pos | [] | 2018-02-04 | | | |
| | | Allaple | [u'Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | [u'OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | Alphabet Ransomware | [] | win.alphabet_ransomware | [] | 2017-01-10 | | | |
| | | AlphaLocker | [] | win.alphalocker | [] | 2018-01-11 | | | |
| | | AlphaNC | [] | win.alphanc | [u'Lazarus Group'] | 2017-05-23 | | | |
| | | Alreay | [] | win.alreay | [u'Lazarus Group'] | 2017-05-17 | | | |
| | | Alureon | [u'Olmarik', u'Pihar', u'TDL', u'TDSS', u'wowlik'] | win.alureon | [] | 2019-07-08 | | | |
| | | Amadey | [] | win.amadey | [] | 2019-05-30 | | | |
| | | AMTsol | [u'Adupihan'] | win.amtsol | [u'PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Andromeda | [u'Gamarue', u'B106-Gamarue', u'B67-SS-Gamarue', u'b66'] | win.andromeda | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | AndroMut | [u'Gelup'] | win.andromut | [u'TA505'] | 2019-07-08 | | | |
| | | AndroRAT | [] | apk.androrat | [u'Dropping Elephant'] | 2018-10-23 | | | |
| | | Anel | [u'UPPERCUT'] | win.anel | [u'Stone Panda'] | 2019-06-24 | | | |
| | | ANTAK | [] | php.antak | [u'APT39', u'Anunak'] | 2019-04-26 | | | |
| | | Antilam | [u'Latinus'] | win.antilam | [] | 2018-07-24 | | | |
| | | Anubis | [u'BankBot', u'android.bankbot', u'android.bankspy'] | apk.anubis | [] | 2019-08-19 | | | |
| | | AnubisSpy | [] | apk.anubisspy | [u'Sphinx (APT-C-15)'] | 2017-12-22 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | AppleJeus | [] | osx.applejeus | [u'Lazarus Group'] | 2019-04-04 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | [u'UPS'] | 2017-05-12 | | | |
| | | ArdaMax | [] | win.ardamax | [] | 2016-12-26 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | Arik Keylogger | [u'Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | [] | win.arkei_stealer | [] | 2018-10-23 | | | |
| | | ARS VBS Loader | [] | win.ars_loader | [] | 2018-10-25 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2019-03-07 | | | |
| | | Asacub | [] | apk.asacub | [] | 2018-10-23 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | ASPC | [] | win.aspc | [] | 2017-05-19 | | | |
| | | Asprox | [u'Aseljo', u'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2019-07-31 | | | |
| | | AthenaGo RAT | [] | win.athenago | [] | 2017-02-13 | | | |
| | | ATI-Agent | [] | win.ati_agent | [u'APT 29'] | 2018-06-07 | | | |
| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2017-04-11 | | | |
| | | Atmosphere | [] | win.atmosphere | [u'Silence group'] | 2019-05-10 | | | |
| | | ATMSpitter | [] | win.atmspitter | [u'Cobalt'] | 2018-05-03 | | | |
| | | August Stealer | [] | win.august_stealer | [] | 2017-01-10 | | | |
| | | Auriga | [u'Riodrv'] | win.auriga | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | [] | win.aurora | [u'Oktropys'] | 2019-01-18 | | | |
| | | AutoCAD Downloader | [u'Acad.Bursted', u'Duxfas'] | fas.acad | [] | 2019-01-09 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2018-03-26 | | | |
| | | Ave Maria | [u'AVE_MARIA', u'Warzone RAT'] | win.ave_maria | [u'Anunak'] | 2019-07-26 | | | |
| | | Aveo | [] | win.aveo | [] | 2016-12-26 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | azazel | [] | elf.azazel | [] | 2019-08-12 | | | |
| | | Azorult | [u'PuffStealer', u'Rultazo'] | win.azorult | [] | 2019-07-12 | | | |
| | | Babar | [u'SNOWBALL'] | win.babar | [u'SNOWGLOBE'] | 2017-09-14 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2019-04-23 | | | |
| | | BABYMETAL | [] | win.babymetal | [u'Anunak'] | 2019-05-09 | | | |
| | | BACKBEND | [] | win.backbend | [u'APT 30'] | 2019-04-17 | | | |
| | | BackNet | [] | win.backnet | [] | 2018-11-19 | | | |
| | | backspace | [] | win.backspace | [u'APT 30'] | 2018-04-26 | | | |
| | | BackSwap | [] | win.backswap | [] | 2018-12-03 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | [u'Leviathan'] | 2019-03-25 | | | |
| | | BadNews | [] | win.badnews | [u'Dropping Elephant'] | 2018-03-27 | | | |
| | | Bagle | [] | win.bagle | [] | 2018-07-24 | | | |
| | | Bahamut | [] | apk.bahamut | [u'Bahamut', u'Dropping Elephant'] | 2018-10-23 | | | |
| | | Bahamut | [] | win.bahamut | [] | 2017-11-17 | | | |
| | | Baldr | [u'Baldir'] | win.baldr | [] | 2019-08-07 | | | |
| | | Banatrix | [] | win.banatrix | [] | 2017-05-22 | | | |
| | | bangat | [] | win.bangat | [u'Comment Crew'] | 2018-09-11 | | | |
| | | Banjori | [u'MultiBanker 2', u'BankPatch', u'BackPatcher'] | win.banjori | [] | 2018-07-31 | | | |
| | | Bankshot | [] | win.bankshot | [u'Lazarus Group'] | 2018-03-12 | | | |
| | | Banload | [] | jar.banload | [] | 2019-04-27 | | | |
| | | Bart | [] | win.bart | [] | 2016-12-27 | | | |
| | | Bashlite | [u'gayfgt', u'Gafgyt', u'qbot', u'torlus', u'lizkebab'] | elf.bashlite | [] | 2018-01-12 | | | |
| | | BatchWiper | [] | win.batchwiper | [] | 2018-06-28 | | | |
| | | Batel | [] | win.batel | [] | 2016-12-27 | | | |
| | | Bateleur | [] | js.bateleur | [u'Anunak'] | 2017-08-01 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2017-11-16 | | | |
| | | BCMPUPnP_Hunter | [] | elf.bcmpupnp_hunter | [] | 2018-11-19 | | | |
| | | Beapy | [] | win.beapy | [] | 2019-04-29 | | | |
| | | Bedep | [] | win.bedep | [] | 2016-04-26 | | | |
| | | beendoor | [] | win.beendoor | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | Bella | [] | osx.bella | [] | 2018-01-31 | | | |
| | | BELLHOP | [] | js.bellhop | [u'Anunak'] | 2019-04-24 | | | |
| | | Belonard | [] | win.belonard | [] | 2019-03-12 | | | |
| | | Berbomthum | [] | win.berbomthum | [] | 2018-12-19 | | | |
| | | BernhardPOS | [] | win.bernhardpos | [] | 2019-03-05 | | | |
| | | BetaBot | [u'Neurevt'] | win.betabot | [] | 2018-10-25 | | | |
| | | Bezigate | [] | win.bezigate | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | BfBot | [] | win.bfbot | [] | 2017-04-29 | | | |
| | | BianLian | [] | apk.bianlian | [] | 2019-07-08 | | | |
| | | BillGates | [] | win.billgates | [] | 2018-01-09 | | | |
| | | BioData | [] | win.biodata | [] | 2019-01-15 | | | |
| | | Biscuit | [u'zxdosml'] | win.biscuit | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Bitsran | [] | win.bitsran | [u'Lazarus Group'] | 2017-11-17 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2019-03-07 | | | |
| | | BI_D Ransomware | [] | win.bid_ransomware | [] | 2019-08-12 | | | |
| | | BKA Trojaner | [u'bwin3_bka'] | win.bka_trojaner | [] | 2018-05-28 | | | |
| | | BLACKCOFFEE | [] | win.blackcoffee | [u'APT41', u'Aurora Panda', u'Leviathan'] | 2019-08-14 | | | |
| | | BlackEnergy | [] | win.blackenergy | [u'Sandworm'] | 2019-01-21 | | | |
| | | BlackPOS | [u'POSWDS', u'Reedum', u'Kaptoxa'] | win.blackpos | [] | 2018-03-13 | | | |
| | | BlackRevolution | [] | win.blackrevolution | [] | 2016-05-31 | | | |
| | | BlackRouter | [u'BLACKHEART'] | win.blackrouter | [] | 2019-01-23 | | | |
| | | Blackruby Ransomware | [] | win.blackruby | [] | 2019-08-14 | | | |
| | | BlackShades | [] | win.blackshades | [] | 2016-04-22 | | | |
| | | Boaxxe | [] | win.boaxxe | [] | 2018-03-26 | | | |
| | | Bohmini | [] | win.bohmini | [] | 2018-07-24 | | | |
| | | Bolek | [u'KBOT'] | win.bolek | [] | 2018-06-04 | | | |
| | | BONDUPDATER | [u'Poison Frog', u'Glimpse'] | ps1.bondupdater | [u'OilRig', u'APT34'] | 2019-05-03 | | | |
| | | Bouncer | [] | win.bouncer | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Bozok | [] | win.bozok | [u'Operation C-Major', u'Temper Panda'] | 2019-04-11 | | | |
| | | BRAIN | [] | win.brain | [] | 2019-03-07 | | | |
| | | Brambul | [] | win.brambul | [u'Lazarus Group'] | 2019-05-09 | | | |
| | | BravoNC | [] | win.bravonc | [u'Lazarus Group'] | 2017-05-23 | | | |
| | | BreachRAT | [] | win.breach_rat | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2018-02-13 | | | |
| | | BrickerBot | [] | py.brickerbot | [] | 2018-01-12 | | | |
| | | BrushaLoader | [] | win.brushaloader | [] | 2019-07-31 | | | |
| | | BrutPOS | [] | win.brutpos | [] | 2018-04-23 | | | |
| | | BS2005 | [] | win.bs2005 | [u'Mirage'] | 2018-03-12 | | | |
| | | BTCWare | [] | win.btcware | [] | 2017-09-14 | | | |
| | | BUBBLEWRAP | [] | win.bubblewrap | [u'Temper Panda'] | 2019-04-12 | | | |
| | | Buhtrap | [u'Ratopak'] | win.buhtrap | [] | 2019-07-11 | | | |
| | | Bundestrojaner | [u'R2D2', u'0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2019-04-16 | | | |
| | | BusyGasper | [] | apk.busygasper | [] | 2018-11-16 | | | |
| | | Buterat | [u'spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | Buzus | [u'Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | BYEBY | [] | win.byeby | [] | 2017-11-16 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | CACTUSTORCH | [] | js.cactustorch | [u'APT32'] | 2019-04-07 | | | |
| | | CadelSpy | [u'Cadelle'] | win.cadelspy | [] | 2017-02-16 | | | |
| | | CamuBot | [] | win.camubot | [] | 2018-09-07 | | | |
| | | Cannibal Rat | [] | win.cannibal_rat | [] | 2018-03-17 | | | |
| | | Cannon | [] | win.cannon | [u'Sofacy'] | 2019-01-06 | | | |
| | | Carbanak | [u'Anunak'] | win.carbanak | [u'Anunak'] | 2019-05-02 | | | |
| | | Carberp | [] | win.carberp | [] | 2016-04-18 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2019-05-09 | | | |
| | | Careto | [u'Mask', u'Appetite'] | osx.careto | [] | 2017-08-22 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2018-12-19 | | | |
| | | Casper | [] | win.casper | [u'SNOWGLOBE'] | 2018-01-17 | | | |
| | | Catchamas | [] | win.catchamas | [u'Thrip'] | 2018-06-25 | | | |
| | | Catelites | [] | apk.catelites | [] | 2017-12-30 | | | |
| | | CCleaner Backdoor | [] | win.ccleaner_backdoor | [] | 2018-04-20 | | | |
| | | CDorked | [u'CDorked.A'] | elf.cdorked | [] | 2018-07-23 | | | |
| | | CenterPOS | [u'cerebrus'] | win.centerpos | [] | 2018-04-23 | | | |
| | | Cerber | [] | win.cerber | [] | 2018-08-21 | | | |
| | | Cerberus | [] | apk.cerberus | [] | 2019-08-13 | | | |
| | | Cerbu | [] | win.cerbu_miner | [] | 2018-10-18 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2018-10-23 | | | |
| | | Chamois | [] | apk.chamois | [] | 2019-04-16 | | | |
| | | Chapro | [] | elf.chapro | [] | 2018-06-28 | | | |
| | | Charger | [] | apk.charger | [] | 2019-03-07 | | | |
| | | ChChes | [u'HAYMAKER', u'Ham Backdoor'] | win.chches | [u'Stone Panda'] | 2019-06-24 | | | |
| | | CherryPicker POS | [u'cherrypickerpos', u'cherrypicker', u'cherry_picker'] | win.cherry_picker | [] | 2018-02-10 | | | |
| | | ChewBacca | [] | win.chewbacca | [] | 2018-04-26 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | [u'Emissary Panda', u'Hurricane Panda', u'Leviathan'] | 2019-05-30 | | | |
| | | Chinad | [] | win.chinad | [] | 2018-06-19 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | Chrysaor | [u'Pegasus', u'JigglyPuff'] | apk.chrysaor | [] | 2018-09-19 | | | |
| | | Chthonic | [u'AndroKINS'] | win.chthonic | [] | 2018-08-09 | | | |
| | | Citadel | [] | win.citadel | [] | 2017-12-23 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clientor | [] | apk.clientor | [] | 2018-09-19 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2019-05-02 | | | |
| | | Clipper | [] | apk.clipper | [] | 2019-02-13 | | | |
| | | Cloud Duke | [] | win.cloud_duke | [u'APT 29'] | 2017-05-21 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | [u'meciv'] | win.cmstar | [] | 2017-11-16 | | | |
| | | CoalaBot | [] | win.coalabot | [] | 2018-12-19 | | | |
| | | Cobalt Strike | [] | win.cobalt_strike | [u'Stone Panda', u'APT 29', u'APT32', u'Cobalt', u'Winnti Umbrella', u'Leviathan', u'Codoso', u'Anunak', u'Shell Crew', u'CopyKittens', u'FIN6'] | 2019-07-12 | | | |
| | | Cobian RAT | [] | win.cobian_rat | [] | 2017-12-23 | | | |
| | | CobInt | [u'COOLPANTS'] | win.cobint | [u'Cobalt'] | 2019-07-29 | | | |
| | | Cobra Carbon System | [u'Carbon'] | win.cobra | [u'Turla Group'] | 2017-01-29 | | | |
| | | CockBlocker | [] | win.cockblocker | [] | 2017-01-10 | | | |
| | | CodeKey | [] | win.codekey | [] | 2017-02-20 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2018-04-23 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2018-01-17 | | | |
| | | CoinThief | [] | osx.cointhief | [] | 2017-08-22 | | | |
| | | Coldroot RAT | [] | osx.coldroot_rat | [] | 2019-07-11 | | | |
| | | Colony | [u'Bandios', u'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combojack | [] | win.combojack | [] | 2018-03-12 | | | |
| | | Combos | [] | win.combos | [u'Comment Crew'] | 2018-02-10 | | | |
| | | CometBot | [] | apk.comet_bot | [] | 2019-03-07 | | | |
| | | ComodoSec | [] | win.comodosec | [] | 2017-01-10 | | | |
| | | Computrace | [u'lojack'] | win.computrace | [u'Sofacy'] | 2018-05-08 | | | |
| | | ComradeCircle | [] | win.comrade_circle | [] | 2017-02-15 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | [u'traffic converter', u'downadup', u'Kido'] | win.conficker | [] | 2019-04-24 | | | |
| | | Confucius | [] | win.confucius | [] | 2017-11-17 | | | |
| | | Connic | [u'SpyBanker'] | apk.connic | [] | 2017-12-14 | | | |
| | | Contopee | [u'WHITEOUT'] | win.contopee | [u'Lazarus Group'] | 2019-08-15 | | | |
| | | CookieBag | [] | win.cookiebag | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Corebot | [] | win.corebot | [] | 2018-01-04 | | | |
| | | CoreDN | [] | win.coredn | [] | 2019-02-05 | | | |
| | | Coreshell | [u'SOURFACE'] | win.coreshell | [u'Sofacy'] | 2019-05-09 | | | |
| | | Cotx RAT | [] | win.cotx | [] | 2019-07-31 | | | |
| | | CpuMeaner | [] | osx.cpumeaner | [] | 2017-12-15 | | | |
| | | Cpuminer | [] | apk.cpuminer | [] | 2017-11-08 | | | |
| | | Cpuminer | [] | elf.cpuminer | [] | 2017-11-27 | | | |
| | | Cr1ptT0r | [u'CriptTor'] | elf.cr1ptt0r | [] | 2019-03-20 | | | |
| | | crackshot | [] | win.crackshot | [u'APT41'] | 2019-08-13 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CrashOverride | [u'Crash', u'Industroyer'] | win.crashoverride | [u'ELECTRUM'] | 2019-03-12 | | | |
| | | CREAMSICLE | [] | win.creamsicle | [u'APT 30'] | 2019-04-17 | | | |
| | | CreativeUpdater | [] | osx.creative_updater | [] | 2018-02-07 | | | |
| | | Credraptor | [] | win.credraptor | [] | 2016-12-27 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |
| | | Crimson RAT | [u'SEEDOOR', u'Scarimson'] | win.crimson | [u'Operation C-Major'] | 2019-07-08 | | | |
| | | Crisis | [] | osx.crisis | [] | 2018-06-28 | | | |
| | | CrossRAT | [u'Trupto'] | jar.crossrat | [u'Dark Caracal'] | 2019-01-09 | | | |
| | | Crossrider | [] | osx.crossrider | [] | 2018-05-11 | | | |
| | | CROSSWALK | [] | win.crosswalk | [u'APT41'] | 2019-08-13 | | | |
| | | Cryakl | [] | win.cryakl | [] | 2018-08-21 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2018-02-10 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2018-01-07 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |
| | | CryptoMix | [u'CryptFile2'] | win.cryptomix | [] | 2017-12-14 | | | |
| | | CryptoNight | [] | js.cryptonight | [] | 2018-04-24 | | | |
| | | CryptoRansomeware | [] | win.crypto_ransomeware | [] | 2017-02-15 | | | |
| | | Cryptorium | [] | win.cryptorium | [] | | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2016-04-18 | | | |
| | | CryptoWire | [] | win.cryptowire | [] | 2018-06-13 | | | |
| | | CryptXXXX | [] | win.cryptxxxx | [] | 2017-12-13 | | | |
| | | CsExt | [] | win.csext | [u'Cleaver'] | 2017-05-21 | | | |
| | | Cuegoe | [] | win.cuegoe | [u'APT32'] | 2017-05-19 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | CukieGrab | [u'Roblox Trade Assist'] | js.cukiegrab_crx | [] | 2017-09-14 | | | |
| | | Cutlet | [] | win.cutlet | [] | 2019-06-23 | | | |
| | | Cutwail | [] | win.cutwail | [] | 2018-06-13 | | | |
| | | CyberGate | [u'Rebhip'] | win.cybergate | [] | 2017-09-14 | | | |
| | | CyberSplitter | [] | win.cyber_splitter | [] | 2016-12-27 | | | |
| | | CycBot | [] | win.cycbot | [] | 2018-01-19 | | | |
| | | Dairy | [] | win.dairy | [u'Comment Crew'] | 2018-02-10 | | | |
| | | DanaBot | [] | win.danabot | [] | 2019-06-27 | | | |
| | | danbot | [] | win.danbot | [] | 2019-08-03 | | | |
| | | DarkComet | [u'Fynloski', u'klovbot'] | win.darkcomet | [u'APT33', u'Operation C-Major'] | 2019-04-07 | | | |
| | | DarkHotel | [] | win.dubnium_darkhotel | [u'DarkHotel'] | 2017-04-29 | | | |
| | | DarkMegi | [] | win.darkmegi | [] | 2018-06-28 | | | |
| | | Darkmoon | [u'Chymine'] | win.darkmoon | [] | 2018-06-28 | | | |
| | | DarkPulsar | [] | win.darkpulsar | [u'Equation Group'] | 2017-05-01 | | | |
| | | DarkShell | [] | win.darkshell | [] | 2018-01-02 | | | |
| | | Darksky | [] | win.darksky | [] | 2018-03-27 | | | |
| | | DarkStRat | [] | win.darkstrat | [] | 2018-09-11 | | | |
| | | DarkTequila | [] | win.darktequila | [] | 2018-08-31 | | | |
| | | Darktrack RAT | [] | win.darktrack_rat | [] | 2017-05-10 | | | |
| | | DarthMiner | [] | osx.darthminer | [] | 2018-12-19 | | | |
| | | Daserf | [u'Muirim', u'Nioupale'] | win.daserf | [u'Tick'] | 2017-11-21 | | | |
| | | Datper | [] | win.datper | [u'Tick'] | 2018-01-02 | | | |
| | | DDKONG | [] | win.ddkong | [u'RANCOR'] | 2018-07-11 | | | |
| | | Decebal | [] | win.decebal | [] | 2018-04-26 | | | |
| | | Delta(Alfa,Bravo, ...) | [] | win.deltas | [u'Lazarus Group'] | 2017-07-12 | | | |
| | | Dented | [] | win.dented | [] | 2017-11-16 | | | |
| | | DeputyDog | [] | win.deputydog | [u'Aurora Panda'] | 2017-05-21 | | | |
| | | DeriaLock | [] | win.deria_lock | [] | | | | |
| | | Derusbi | [u'PHOTO'] | win.derusbi | [u'Axiom', u'Leviathan', u'Stone Panda'] | 2019-06-24 | | | |
| | | Devil's Rat | [] | win.devils_rat | [] | 2017-09-18 | | | |
| | | Dexter | [u'LusyPOS'] | win.dexter | [] | 2018-01-25 | | | |
| | | Dharma | [u'Crysis', u'Arena'] | win.dharma | [] | 2018-11-28 | | | |
| | | DiamondFox | [u'Crystal', u'Gorynych', u'Gorynch'] | win.diamondfox | [] | 2018-02-21 | | | |
| | | DILLJUICE | [] | win.dilljuice | [u'Stone Panda'] | 2019-06-23 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | [] | win.disttrack | [u'Shamoon', u'Magic Hound', u'Timberworm', u'COBALT GIPSY'] | 2019-01-18 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2019-04-02 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSMessenger | [u'TEXTMATE'] | win.dnsmessenger | [u'Anunak'] | 2019-04-24 | | | |
| | | DNSpionage | [u'Agent Drable', u'Webmask'] | win.dnspionage | [u'DNSpionage'] | 2019-05-17 | | | |
| | | DNSRat | [u'DNSbot'] | js.dnsrat | [u'Anunak'] | 2019-04-03 | | | |
| | | Dockster | [] | osx.dockster | [] | 2018-06-28 | | | |
| | | DogHousePower | [u'Shelma'] | win.doghousepower | [] | 2018-01-03 | | | |
| | | Dok | [u'Retefe'] | osx.retefe | [] | 2019-05-02 | | | |
| | | DoppelPaymer | [] | win.doppelpaymer | [u'INDRIK SPIDER'] | 2019-07-31 | | | |
| | | Dorshel | [] | win.dorshel | [u'Energetic Bear'] | 2017-09-14 | | | |
| | | DoubleLocker | [] | apk.doublelocker | [] | 2017-10-20 | | | |
| | | DoublePulsar | [] | win.doublepulsar | [u'Equation Group', u'UPS'] | 2019-05-07 | | | |
| | | Downdelph | [u'DELPHACY'] | win.downdelph | [u'Sofacy'] | 2017-05-03 | | | |
| | | Downeks | [] | win.downeks | [] | 2017-02-15 | | | |
| | | DownPaper | [] | win.downpaper | [u'Charming Kitten'] | 2017-12-15 | | | |
| | | Downrage | [u'GAMEFISH'] | win.downrage | [u'Sofacy'] | 2019-06-09 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2018-01-10 | | | |
| | | Dridex | [] | win.dridex | [u'TA505', u'INDRIK SPIDER'] | 2019-07-31 | | | |
| | | DRIFTPIN | [u'Toshliph', u'Spy.Agent.ORM'] | win.driftpin | [u'Anunak'] | 2019-04-24 | | | |
| | | DROPSHOT | [] | win.dropshot | [u'APT33'] | 2018-06-25 | | | |
| | | DtBackdoor | [] | win.dtbackdoor | [] | 2017-04-29 | | | |
| | | DualToy | [] | apk.dualtoy | [] | 2017-02-15 | | | |
| | | DualToy | [] | ios.dualtoy | [] | 2017-02-15 | | | |
| | | DualToy | [] | win.dualtoy | [] | 2018-01-22 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | Dumador | [] | win.dumador | [] | 2018-07-24 | | | |
| | | Dummy | [] | osx.dummy | [] | 2018-07-06 | | | |
| | | DuQu | [] | win.duqu | [u'Unit 8200'] | 2019-05-23 | | | |
| | | Duuzer | [] | win.duuzer | [u'Lazarus Group'] | 2017-05-23 | | | |
| | | Dvmap | [] | apk.dvmap | [] | 2017-06-13 | | | |
| | | Dyre | [u'Dyreza'] | win.dyre | [u'WIZARD SPIDER'] | 2019-02-21 | | | |
| | | Ebury | [] | elf.ebury | [] | 2019-06-08 | | | |
| | | Echobot | [] | elf.echobot | [] | 2019-08-12 | | | |
| | | EDA2 | [] | win.eda2_ransom | [] | 2017-02-15 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2017-09-14 | | | |
| | | Eleanor | [] | osx.eleanor | [] | 2019-04-03 | | | |
| | | ELECTRICFISH | [] | win.electricfish | [u'Lazarus Group'] | 2019-08-15 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | elf.vpnfilter | [] | elf.vpnfilter | [] | 2019-05-24 | | | |
| | | elf.wellmess | [] | elf.wellmess | [] | 2018-07-06 | | | |
| | | Elirks | [] | win.elirks | [] | 2018-04-13 | | | |
| | | Elise | [] | win.elise | [u'Lotus Blossom'] | 2018-02-26 | | | |
| | | ELMER | [u'Elmost'] | win.elmer | [u'Danti', u'APT 16'] | 2019-04-12 | | | |
| | | Emdivi | [] | win.emdivi | [u'Stone Panda'] | 2018-01-11 | | | |
| | | Emotet | [u'Geodo', u'Heodo'] | win.emotet | [u'MUMMY SPIDER', u'Mealybug'] | 2019-06-18 | | | |
| | | Empire Downloader | [] | win.empire_downloader | [] | 2018-05-08 | | | |
| | | Enfal | [u'Lurid'] | win.enfal | [] | 2017-02-15 | | | |
| | | EquationDrug | [] | win.equationdrug | [u'Equation Group'] | 2019-06-23 | | | |
| | | Equationgroup (Sorting) | [] | win.equationgroup | [] | 2017-09-26 | | | |
| | | Erebus | [] | elf.erebus | [] | 2018-02-21 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | Eredel | [] | win.eredel | [] | 2018-09-21 | | | |
| | | EternalPetya | [u'ExPetr', u'Pnyetya', u'Petna', u'NotPetya', u'Nyetya', u'NonPetya', u'nPetya', u'Diskcoder.C', u'BadRabbit'] | win.eternal_petya | [u'TeleBots', u'Sandworm'] | 2018-10-11 | | | |
| | | EtumBot | [u'HighTide'] | win.etumbot | [u'IXESHE'] | 2018-01-11 | | | |
| | | Evilbunny | [] | win.evilbunny | [u'SNOWGLOBE'] | 2017-09-14 | | | |
| | | EvilGnome | [] | elf.evilgnome | [u'Gamaredon Group'] | 2019-07-31 | | | |
| | | EvilGrab | [u'Vidgrab'] | win.evilgrab | [u'Stone Panda'] | 2019-06-24 | | | |
| | | EVILNUM | [] | js.evilnum | [] | 2019-03-21 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2019-03-21 | | | |
| | | EvilOSX | [] | osx.evilosx | [] | 2018-02-26 | | | |
| | | EvilPony | [u'CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | Evrial | [] | win.evrial | [] | 2018-02-01 | | | |
| | | Exaramel | [] | win.exaramel | [u'TeleBots'] | 2019-05-30 | | | |
| | | Excalibur | [u'Sabresac', u'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Exile RAT | [] | win.exilerat | [] | 2019-02-07 | | | |
| | | ExoBot | [] | apk.exobot | [] | 2018-09-13 | | | |
| | | Exodus | [] | apk.exodus | [] | 2019-04-03 | | | |
| | | ext4 | [] | elf.ext4 | [] | 2018-08-23 | | | |
| | | Eye Pyramid | [] | win.eye_pyramid | [] | 2017-02-15 | | | |
| | | FailyTale | [] | osx.failytale | [] | 2019-04-04 | | | |
| | | Fake Pornhub | [] | apk.pornhub | [] | 2017-02-15 | | | |
| | | FakeDGA | [u'WillExec'] | win.fakedga | [] | 2018-02-26 | | | |
| | | FakeGram | [u'FakeTGram'] | apk.faketgram | [] | 2018-11-19 | | | |
| | | FakeRean | [u'Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeSpy | [] | apk.fakespy | [] | 2018-12-19 | | | |
| | | FakeTC | [] | win.faketc | [u'Sandworm'] | | | | |
| | | Fanny | [] | win.fanny | [u'Equation Group'] | 2017-09-18 | | | |
| | | FantomCrypt | [] | win.fantomcrypt | [] | 2018-01-11 | | | |
| | | Farseer | [] | win.farseer | [] | 2019-04-07 | | | |
| | | FastCash | [] | aix.fastcash | [u'Lazarus Group'] | 2019-06-23 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2018-02-15 | | | |
| | | FBot | [] | elf.fbot | [] | 2019-03-14 | | | |
| | | FEimea RAT | [] | jar.feimea_rat | [] | 2019-03-07 | | | |
| | | Felismus | [] | win.felismus | [u'Sowbug'] | 2017-11-21 | | | |
| | | Felixroot | [] | win.felixroot | [u'GreyEnergy'] | 2018-11-19 | | | |
| | | Feodo | [u'Cridex', u'Bugat'] | win.feodo | [] | 2018-07-24 | | | |
| | | FileCoder | [] | apk.filecoder | [] | 2019-07-31 | | | |
| | | Filecoder | [] | win.unidentified_030 | [] | 2017-07-11 | | | |
| | | FileIce | [] | win.fileice_ransom | [] | 2018-02-13 | | | |
| | | Final1stSpy | [] | win.final1stspy | [u'APT37'] | 2018-10-23 | | | |
| | | FindPOS | [u'Poseidon'] | win.findpos | [] | 2018-03-01 | | | |
| | | FinFisher | [] | apk.finfisher | [] | 2019-07-11 | | | |
| | | FinFisher RAT | [u'FinSpy'] | win.finfisher | [] | 2018-03-02 | | | |
| | | Fireball | [] | win.fireball | [] | 2017-07-11 | | | |
| | | FireCrypt | [] | win.firecrypt | [] | | | | |
| | | FireMalv | [] | win.firemalv | [u'Rocket Kitten'] | 2018-04-17 | | | |
| | | FirstRansom | [] | win.first_ransom | [] | 2017-02-15 | | | |
| | | Flame | [] | win.flame | [] | 2019-04-18 | | | |
| | | FlashBack | [] | osx.flashback | [] | 2018-06-28 | | | |
| | | FLASHFLOOD | [] | win.flashflood | [u'APT 30'] | 2019-04-17 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | [u'TA505'] | 2019-07-02 | | | |
| | | FlawedGrace | [] | win.flawedgrace | [u'TA505'] | 2019-01-15 | | | |
| | | FlexiSpy | [] | apk.flexispy | [] | 2017-05-01 | | | |
| | | FlexiSpy | [] | symbian.flexispy | [] | 2017-05-01 | | | |
| | | FlexiSpy | [] | win.flexispy | [] | 2017-05-01 | | | |
| | | FlexNet | [u'gugi'] | apk.flexnet | [] | 2017-07-26 | | | |
| | | FlokiBot | [] | win.floki_bot | [] | 2018-01-22 | | | |
| | | floodor | [] | elf.floodor | [] | 2019-08-12 | | | |
| | | FlowerShop | [] | win.flowershop | [] | 2019-04-18 | | | |
| | | Floxif | [] | win.floxif | [] | 2017-02-15 | | | |
| | | Flusihoc | [] | win.flusihoc | [] | 2017-10-09 | | | |
| | | Fobber | [] | win.fobber | [] | 2017-08-01 | | | |
| | | forbiks | [] | vbs.forbiks | [] | 2019-07-31 | | | |
| | | Formbook | [] | win.formbook | [u'SWEED'] | 2019-07-31 | | | |
| | | FormerFirstRAT | [u'ffrat'] | win.former_first_rat | [u'DragonOK'] | 2019-07-08 | | | |
| | | Freenki Loader | [] | win.freenki | [u'APT37'] | 2017-11-16 | | | |
| | | FriedEx | [u'BitPaymer'] | win.friedex | [u'INDRIK SPIDER'] | 2019-07-31 | | | |
| | | FruitFly | [u'Quimitchin'] | osx.fruitfly | [] | 2018-08-27 | | | |
| | | Furtim | [] | win.furtim | [] | 2017-02-15 | | | |
| | | GalaxyLoader | [] | win.galaxyloader | [] | 2018-03-26 | | | |
| | | gamapos | [u'pios'] | win.gamapos | [] | 2018-04-25 | | | |
| | | Gameover DGA | [] | win.gameover_dga | [] | 2016-04-18 | | | |
| | | Gameover P2P | [u'ZeuS P2P', u'GOZ'] | win.gameover_p2p | [] | 2018-02-21 | | | |
| | | Gamotrol | [] | win.gamotrol | [] | 2018-07-24 | | | |
| | | Gandcrab | [u'GrandCrab'] | win.gandcrab | [u'Pinchy Spider'] | 2019-07-12 | | | |
| | | Gaudox | [] | win.gaudox | [] | 2017-11-21 | | | |
| | | Gauss | [] | win.gauss | [] | 2018-07-10 | | | |
| | | Gazer | [u'WhiteBear'] | win.gazer | [u'Turla Group'] | 2018-09-10 | | | |
| | | gcman | [] | win.gcman | [] | 2018-09-11 | | | |
| | | GearInformer | [] | win.gearinformer | [] | 2017-11-21 | | | |
| | | GEARSHIFT | [] | win.gearshift | [u'APT41'] | 2019-08-13 | | | |
| | | GEMCUTTER | [] | win.gemcutter | [u'APT 30'] | 2019-04-17 | | | |
| | | GetMail | [] | win.getmail | [u'Comment Crew'] | 2018-02-10 | | | |
| | | GetMyPass | [u'getmypos'] | win.getmypass | [] | 2018-02-04 | | | |
| | | Gh0stnet | [u'Remosh'] | win.ghostnet | [] | 2019-04-03 | | | |
| | | Ghole | [u'Gholee', u'CoreImpact (Modified)'] | win.ghole | [u'Rocket Kitten'] | 2019-02-19 | | | |
| | | Ghost RAT | [u'PCRat', u'Gh0st RAT'] | win.ghost_rat | [u'Emissary Panda', u'Hurricane Panda', u'Lazarus Group', u'Leviathan', u'Stone Panda'] | 2019-06-24 | | | |
| | | GhostAdmin | [u'Ghost iBot'] | win.ghost_admin | [] | 2017-04-05 | | | |
| | | GhostCtrl | [] | apk.ghostctrl | [] | 2017-07-19 | | | |
| | | GhostMiner | [] | ps1.ghostminer | [] | 2019-05-30 | | | |
| | | GlanceLove | [] | apk.glancelove | [u'AridViper'] | 2018-07-06 | | | |
| | | Glasses | [u'Wordpress Bruteforcer'] | win.glasses | [] | 2016-12-29 | | | |
| | | GlassRAT | [] | win.glassrat | [] | 2018-03-26 | | | |
| | | GlitchPOS | [] | win.glitch_pos | [] | 2019-03-13 | | | |
| | | Globe | [] | win.globe_ransom | [] | 2017-02-15 | | | |
| | | GlobeImposter | [] | win.globeimposter | [] | 2018-03-09 | | | |
| | | GlooxMail | [] | win.glooxmail | [u'Comment Crew'] | 2018-02-13 | | | |
| | | Glupteba | [] | win.glupteba | [] | 2018-03-26 | | | |
| | | GoBotKR | [] | win.gobotkr | [] | 2019-07-11 | | | |
| | | Godlua | [] | elf.godlua | [] | 2019-07-02 | | | |
| | | Godzilla Loader | [] | win.godzilla_loader | [] | 2019-06-08 | | | |
| | | Goggles | [] | win.goggles | [u'Comment Crew'] | 2018-02-10 | | | |
| | | GoldDragon | [] | win.gold_dragon | [] | 2018-02-13 | | | |
| | | GoldenEye | [u'Petya/Mischa'] | win.goldeneye | [] | 2017-07-17 | | | |
| | | GoldenRAT | [] | apk.goldenrat | [u'APT-C-27'] | 2019-03-21 | | | |
| | | Golroted | [] | win.golroted | [] | 2017-12-14 | | | |
| | | Goodor | [u'Fuerboos'] | win.goodor | [] | 2018-04-13 | | | |
| | | GoogleDrive RAT | [] | win.google_drive_rat | [u'OilRig'] | 2018-03-26 | | | |
| | | GooPic Drooper | [] | win.goopic | [] | 2018-01-25 | | | |
| | | GootKit | [u'Waldek', u'Xswkit', u'talalpek'] | win.gootkit | [] | 2019-08-03 | | | |
| | | GovRAT | [] | win.govrat | [] | 2018-04-20 | | | |
| | | Gozi | [u'CRM', u'Gozi CRM', u'Papras', u'Snifula', u'Ursnif'] | win.gozi | [] | 2018-01-10 | | | |
| | | GPCode | [] | win.gpcode | [] | 2018-02-09 | | | |
| | | GPlayed | [] | apk.gplayed | [] | 2018-11-16 | | | |
| | | GrabBot | [] | win.grabbot | [] | 2017-03-28 | | | |
| | | Graftor | [] | win.graftor | [] | 2017-09-14 | | | |
| | | Grateful POS | [u'FrameworkPOS', u'trinity'] | win.grateful_pos | [u'Skeleton Spider', u'FIN6'] | 2019-02-19 | | | |
| | | Gratem | [] | win.gratem | [] | 2017-04-06 | | | |
| | | Gravity RAT | [] | win.gravity_rat | [] | 2018-05-02 | | | |
| | | GREASE | [] | win.grease | [] | 2019-01-18 | | | |
| | | GreedyAntd | [] | elf.greedyantd | [u'Pacha Group'] | 2019-05-18 | | | |
| | | GreenShaitan | [u'eoehttp'] | win.greenshaitan | [] | 2018-04-23 | | | |
| | | GreyEnergy | [] | win.grey_energy | [u'GreyEnergy'] | 2019-02-21 | | | |
| | | Griffon | [] | js.griffon | [u'Anunak'] | 2019-05-17 | | | |
| | | GRILLMARK | [] | win.grillmark | [u'Leviathan'] | 2019-05-15 | | | |
| | | GROK | [] | win.grok | [u'Equation Group'] | 2017-05-03 | | | |
| | | gsecdump | [] | win.gsecdump | [] | 2018-04-17 | | | |
| | | GuiInject | [] | ios.guiinject | [] | 2017-02-15 | | | |
| | | GUP Proxy Tool | [] | win.gup_proxy | [] | 2019-08-07 | | | |
| | | Gustuff | [] | apk.gustuff | [] | 2019-04-15 | | | |
| | | H1N1 Loader | [] | win.h1n1 | [] | 2016-12-27 | | | |
| | | Hacksfase | [] | win.hacksfase | [u'Comment Crew'] | 2018-02-13 | | | |
| | | HackSpy | [] | win.hackspy | [] | 2018-02-21 | | | |
| | | Haiduc | [] | elf.haiduc | [] | 2018-11-08 | | | |
| | | Hajime | [] | elf.hajime | [] | 2018-04-13 | | | |
| | | Hakai | [] | elf.hakai | [] | 2018-09-05 | | | |
| | | HALFBAKED | [] | vbs.halfbaked | [u'Anunak'] | 2019-04-24 | | | |
| | | Hamweq | [] | win.hamweq | [] | 2018-02-26 | | | |
| | | Hancitor | [u'Chanitor'] | win.hancitor | [] | 2019-04-29 | | | |
| | | HappyLocker (HiddenTear?) | [] | win.happy_locker | [] | 2017-04-29 | | | |
| | | Harnig | [u'Piptea'] | win.harnig | [] | 2018-01-22 | | | |
| | | Havex RAT | [] | win.havex_rat | [u'Energetic Bear'] | 2019-01-14 | | | |
| | | HAWKBALL | [] | win.hawkball | [] | 2019-07-10 | | | |
| | | HawkEye Keylogger | [u'Predator Pain', u'HawkEye Reborn'] | win.hawkeye_keylogger | [] | 2019-08-13 | | | |
| | | Helauto | [] | win.helauto | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Helminth | [] | win.helminth | [u'APT34'] | 2019-04-19 | | | |
| | | Heloag | [] | win.heloag | [] | 2018-01-25 | | | |
| | | Herbst | [] | win.herbst | [] | 2018-01-29 | | | |
| | | Heriplor | [] | win.heriplor | [u'Energetic Bear'] | 2019-04-08 | | | |
| | | Hermes | [] | win.hermes | [u'Lazarus Group'] | 2017-11-17 | | | |
| | | Hermes Ransomware | [] | win.hermes_ransom | [] | 2019-04-16 | | | |
| | | HeroRAT | [] | apk.hero_rat | [] | 2018-06-25 | | | |
| | | HerpesBot | [] | win.herpes | [] | 2016-05-31 | | | |
| | | HesperBot | [] | win.hesperbot | [] | 2016-04-18 | | | |
| | | Hi-Zor RAT | [] | win.hi_zor_rat | [] | 2018-02-15 | | | |
| | | Hidden Bee | [] | win.hiddenbee | [] | 2019-08-19 | | | |
| | | HiddenAd | [] | apk.hiddenad | [] | 2019-06-23 | | | |
| | | HiddenLotus | [] | osx.hiddenlotus | [] | 2018-03-23 | | | |
| | | HiddenTear | [] | win.hiddentear | [] | 2017-02-15 | | | |
| | | HiddenWasp | [] | elf.hiddenwasp | [] | 2019-06-02 | | | |
| | | Hide and Seek | [u'HNS'] | elf.hideandseek | [] | 2018-12-19 | | | |
| | | HideDRV | [] | win.hidedrv | [] | 2017-05-03 | | | |
| | | HIGHNOON | [] | win.highnoon | [u'APT41', u'Aurora Panda'] | 2019-08-13 | | | |
| | | HIGHNOON.BIN | [] | win.highnoon_bin | [u'APT41'] | 2019-08-13 | | | |
| | | HIGHNOTE | [u'ChyNode'] | win.highnote | [u'Axiom'] | 2019-07-31 | | | |
| | | HiKit | [] | win.hikit | [u'Aurora Panda', u'Hurricane Panda'] | 2019-05-26 | | | |
| | | himan | [] | win.himan | [] | 2018-09-11 | | | |
| | | HLUX | [] | win.hlux | [] | 2016-04-26 | | | |
| | | homefry | [] | win.homefry | [u'Leviathan'] | 2019-03-09 | | | |
| | | HOPLIGHT | [] | win.hoplight | [u'Lazarus Group'] | 2019-04-11 | | | |
| | | Houdini | [u'Hworm', u'Njw0rm', u'Jenxcus', u'Kognito', u'WSHRAT'] | win.houdini | [] | 2019-05-07 | | | |
| | | HtBot | [] | win.htbot | [] | 2017-05-29 | | | |
| | | HTML5 Encoding | [] | js.turla_ff_ext | [u'Turla Group'] | 2017-07-11 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | HTran | [u'HUC Packet Transmit Tool'] | win.htran | [u'UPS'] | 2019-05-08 | | | |
| | | HttpBrowser | [] | win.httpbrowser | [u'Wekby', u'Emissary Panda'] | 2019-06-23 | | | |
| | | httpdropper | [u'httpdr0pper'] | win.httpdropper | [] | 2018-09-13 | | | |
| | | http_troy | [] | win.http_troy | [] | 2018-09-19 | | | |
| | | Hworm | [] | vbs.hworm | [] | 2019-05-07 | | | |
| | | Hworm | [u'houdini'] | win.hworm | [] | 2019-06-19 | | | |
| | | Hydra | [] | apk.hydra | [] | 2019-07-31 | | | |
| | | HyperBro | [] | win.hyperbro | [u'Emissary Panda'] | 2019-06-02 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2018-02-13 | | | |
| | | IcedID | [u'BokBot'] | win.icedid | [u'Lunar Spider'] | 2019-07-24 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2017-12-05 | | | |
| | | Icefog | [] | win.icefog | [] | 2018-02-27 | | | |
| | | IDKEY | [] | win.idkey | [] | 2017-09-20 | | | |
| | | IISniff | [] | win.iisniff | [] | 2018-05-14 | | | |
| | | Iloveyou | [u'LoveLetter', u'Love Bug'] | vbs.iloveyou | [] | 2019-05-20 | | | |
| | | Imecab | [] | win.imecab | [u'Leafminer'] | 2018-08-03 | | | |
| | | Imminent Monitor RAT | [] | win.imminent_monitor_rat | [u'APT-C-36'] | 2019-03-21 | | | |
| | | iMuler | [u'Revir'] | osx.imuler | [] | 2018-06-28 | | | |
| | | Infy | [u'Foudre'] | win.infy | [] | 2018-08-21 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | inter | [] | js.inter | [] | 2019-07-31 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2018-06-13 | | | |
| | | IoT Reaper | [u'IoTroop', u'Reaper'] | elf.iot_reaper | [] | 2017-10-24 | | | |
| | | Irc16 | [] | elf.backdoor_irc16 | [] | 2017-02-15 | | | |
| | | IRONHALO | [] | win.ironhalo | [u'APT 16'] | 2019-04-11 | | | |
| | | IRRat | [] | apk.irrat | [] | 2018-03-22 | | | |
| | | ISFB | [u'Gozi ISFB', u'IAP', u'Pandemyia'] | win.isfb | [] | 2019-05-31 | | | |
| | | ISMAgent | [] | win.ismagent | [u'Greenbug', u'APT34'] | 2019-04-19 | | | |
| | | ISMDoor | [] | win.ismdoor | [u'Greenbug'] | 2017-02-15 | | | |
| | | iSpy Keylogger | [] | win.ispy_keylogger | [] | 2016-12-27 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsraBye | [] | win.israbye | [] | 2019-01-23 | | | |
| | | IsSpace | [] | win.isspace | [u'DragonOK'] | 2017-02-15 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | JadeRAT | [] | apk.jaderat | [] | 2017-11-17 | | | |
| | | Jaff | [] | win.jaff | [] | 2017-08-01 | | | |
| | | Jager Decryptor | [] | win.jager_decryptor | [] | 2016-12-28 | | | |
| | | Jaku | [u'Reconcyc', u'KCNA Infostealer', u'C3PRO-RACOON'] | win.jaku | [] | 2019-01-23 | | | |
| | | jason | [] | win.jason | [u'OilRig'] | 2019-06-23 | | | |
| | | JasperLoader | [] | ps1.jasperloader | [] | 2019-06-23 | | | |
| | | Jasus | [] | win.jasus | [u'Cleaver'] | 2017-05-21 | | | |
| | | JavaDispCash | [] | jar.javadispcash | [] | 2019-04-03 | | | |
| | | JCry | [] | win.jcry | [] | 2019-03-06 | | | |
| | | JenX | [] | elf.jenx | [] | 2018-02-26 | | | |
| | | Jigsaw | [] | win.jigsaw | [] | 2016-04-19 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | Joanap | [] | win.joanap | [u'Lazarus Group'] | 2018-06-19 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JQJSNICKER | [] | win.jqjsnicker | [u'CIA'] | 2017-03-28 | | | |
| | | jRAT | [u'Jacksbot'] | jar.jrat | [] | 2019-05-30 | | | |
| | | JripBot | [] | win.jripbot | [u'WildNeutron'] | 2017-06-06 | | | |
| | | jSpy | [] | jar.jspy | [] | 2018-05-14 | | | |
| | | JUMPALL | [] | win.jumpall | [u'APT41'] | 2019-08-13 | | | |
| | | KAgent | [] | win.kagent | [u'Cleaver'] | 2017-05-21 | | | |
| | | Kaiten | [u'STD'] | elf.kaiten | [] | 2017-02-15 | | | |
| | | Karagany | [] | win.karagany | [u'Energetic Bear'] | 2019-07-31 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2018-06-14 | | | |
| | | Karkoff | [] | win.karkoff | [u'DNSpionage'] | 2019-04-24 | | | |
| | | KasperAgent | [] | win.kasperagent | [] | 2017-07-11 | | | |
| | | Kazuar | [] | win.kazuar | [u'Turla Group'] | 2017-05-12 | | | |
| | | Kegotip | [] | win.kegotip | [] | 2016-04-19 | | | |
| | | Kelihos | [] | win.kelihos | [] | 2018-06-19 | | | |
| | | KeRanger | [] | osx.keranger | [] | 2017-02-15 | | | |
| | | kerberods | [] | elf.kerberods | [u'Rocke'] | 2019-06-26 | | | |
| | | KerrDown | [] | win.kerrdown | [u'APT32'] | 2019-03-15 | | | |
| | | Ketrican | [] | win.ketrican | [u'Mirage'] | 2019-07-31 | | | |
| | | KevDroid | [] | apk.kevdroid | [u'APT37'] | 2018-04-24 | | | |
| | | KeyBase | [u'Kibex'] | win.keybase | [] | 2019-02-08 | | | |
| | | KeyBoy | [u'TSSL'] | win.keyboy | [u'Tropic Trooper'] | 2018-08-21 | | | |
| | | Keydnap | [] | osx.keydnap | [] | 2017-02-15 | | | |
| | | KEYMARBLE | [] | win.keymarble | [u'Lazarus Group'] | 2019-02-19 | | | |
| | | KHRAT | [] | win.khrat | [u'DragonOK'] | 2017-09-01 | | | |
| | | Kikothac | [] | win.kikothac | [] | 2018-09-06 | | | |
| | | KillDisk | [] | win.killdisk | [u'TeleBots', u'Sandworm'] | 2018-01-17 | | | |
| | | KINS | [u'Kasper Internet Non-Security', u'Maple'] | win.kins | [] | 2018-11-08 | | | |
| | | Kitmos | [u'KitM'] | osx.kitmos | [] | 2018-03-17 | | | |
| | | KleptoParasite Stealer | [u'Joglog'] | win.kleptoparasite_stealer | [] | 2018-11-26 | | | |
| | | KLRD | [] | win.klrd | [u'Anunak'] | 2019-03-05 | | | |
| | | Koadic | [] | win.koadic | [u'Sofacy'] | 2018-06-07 | | | |
| | | KokoKrypt | [] | win.kokokrypt | [] | | | | |
| | | Koler | [] | apk.koler | [] | 2017-11-21 | | | |
| | | Komplex | [u'SedUploader', u'JHUHUGIT', u'JKEYSKW'] | osx.komplex | [u'Sofacy'] | 2017-02-15 | | | |
| | | KOMPROGO | [u'Splinter RAT'] | win.komprogo | [u'APT32'] | 2019-06-17 | | | |
| | | Konni | [] | win.konni | [] | 2019-05-17 | | | |
| | | KoobFace | [] | win.koobface | [] | 2016-04-19 | | | |
| | | KopiLuwak | [] | js.kopiluwak | [u'Turla Group'] | 2018-10-23 | | | |
| | | Korlia | [u'Bisonal'] | win.korlia | [] | 2018-08-03 | | | |
| | | Kovter | [] | win.kovter | [] | 2019-07-20 | | | |
| | | KPOT Stealer | [u'Khalesi'] | win.kpot_stealer | [] | 2019-07-24 | | | |
| | | Kraken | [] | win.kraken | [] | 2018-11-08 | | | |
| | | KrBanker | [u'BlackMoon'] | win.krbanker | [] | 2019-03-20 | | | |
| | | KrDownloader | [] | win.krdownloader | [] | 2017-05-12 | | | |
| | | Kronos | [u'Osiris'] | win.kronos | [] | 2019-04-24 | | | |
| | | KSL0T | [] | win.ksl0t | [u'Turla Group'] | 2019-07-31 | | | |
| | | Kuaibu | [u'Barys', u'Gofot', u'Kuaibpy'] | win.kuaibu8 | [] | 2017-03-29 | | | |
| | | Kuluoz | [] | win.kuluoz | [] | 2017-11-23 | | | |
| | | Kurton | [] | win.kurton | [u'Comment Crew'] | 2018-02-13 | | | |
| | | Kutaki | [] | win.kutaki | [] | 2019-01-29 | | | |
| | | Kwampirs | [] | win.kwampirs | [u'Orangeworm'] | 2019-04-03 | | | |
| | | L0rdix | [u'lordix'] | win.lordix | [] | 2019-08-15 | | | |
| | | Lady | [] | elf.lady | [] | 2017-04-06 | | | |
| | | Lambert | [u'Plexor'] | win.lambert | [u'Longhorn'] | 2017-06-09 | | | |
| | | Lamdelin | [] | win.lamdelin | [] | 2018-04-12 | | | |
| | | Laoshu | [] | osx.laoshu | [] | 2017-08-28 | | | |
| | | LatentBot | [] | win.latentbot | [] | 2017-06-11 | | | |
| | | Lazarus | [] | apk.lazarus | [u'Lazarus Group'] | 2017-11-21 | | | |
| | | Lazarus | [] | win.lazarus | [u'Lazarus Group'] | 2017-04-29 | | | |
| | | Lazarus ELF Backdoor | [] | apk.lazarus_elf | [u'Lazarus Group'] | 2017-12-22 | | | |
| | | Laziok | [] | win.laziok | [] | 2018-01-17 | | | |
| | | LazyCat | [] | win.lazycat | [] | 2019-04-03 | | | |
| | | Leash | [] | win.leash | [u'Magic Hound'] | 2017-12-15 | | | |
| | | Leouncia | [u'shoco'] | win.leouncia | [] | 2018-09-19 | | | |
| | | Lethic | [] | win.lethic | [] | 2017-11-21 | | | |
| | | Leverage | [] | osx.leverage | [] | 2017-08-31 | | | |
| | | LightNeuron | [u'Neptun'] | win.lightneuron | [u'Turla Group'] | 2019-06-21 | | | |
| | | Ligsterac | [] | win.ligsterac | [] | 2019-06-23 | | | |
| | | Lilith | [] | win.lilith | [] | 2019-06-14 | | | |
| | | lilyofthevalley | [] | elf.lilyofthevalley | [] | 2019-08-12 | | | |
| | | limedownloader | [] | win.limedownloader | [] | 2019-07-31 | | | |
| | | limeminer | [] | win.limeminer | [] | 2019-07-31 | | | |
| | | LimeRAT | [] | win.limerat | [] | 2019-04-11 | | | |
| | | Limitail | [] | win.limitail | [] | 2017-04-29 | | | |
| | | Listrix | [] | win.listrix | [u'Energetic Bear'] | 2017-09-14 | | | |
| | | LiteHTTP | [] | win.litehttp | [] | 2018-09-27 | | | |
| | | LockerGoga | [] | win.lockergoga | [u'FIN6'] | 2019-05-17 | | | |
| | | LockPOS | [] | win.lock_pos | [] | 2018-02-26 | | | |
| | | Locky | [] | win.locky | [u'TA505'] | 2019-01-15 | | | |
| | | Locky (Decryptor) | [] | win.locky_decryptor | [] | 2016-04-19 | | | |
| | | Locky Loader | [] | win.locky_loader | [] | 2018-01-11 | | | |
| | | Loda | [u'Nymeria'] | win.loda | [] | 2018-01-25 | | | |
| | | Logedrut | [] | win.logedrut | [] | 2018-04-13 | | | |
| | | LogPOS | [] | win.logpos | [] | 2018-02-10 | | | |
| | | LoJax | [] | win.lojax | [u'Sofacy'] | 2019-05-26 | | | |
| | | Loki | [] | apk.loki | [] | 2017-03-24 | | | |
| | | Loki Password Stealer (PWS) | [u'Loki', u'LokiPWS', u'LokiBot'] | win.lokipws | [u'SWEED', u'The Gorgon Group'] | 2019-07-31 | | | |
| | | LokiBot | [] | apk.lokibot | [] | 2018-06-19 | | | |
| | | LONGWATCH | [] | win.longwatch | [u'APT34'] | 2019-07-23 | | | |
| | | Lookback | [] | win.lookback | [] | 2019-08-07 | | | |
| | | LOWBALL | [] | win.lowball | [u'Temper Panda'] | 2019-04-12 | | | |
| | | LuckyCat | [] | apk.luckycat | [] | 2019-02-05 | | | |
| | | Luminosity RAT | [] | win.luminosity_rat | [u'Operation C-Major'] | 2019-04-07 | | | |
| | | LunchMoney | [] | win.lunchmoney | [u'Leviathan'] | 2019-03-10 | | | |
| | | Lurk | [] | win.lurk | [] | 2016-05-10 | | | |
| | | Luzo | [] | win.luzo | [] | 2016-05-31 | | | |
| | | Lyposit | [u'Lucky Locker', u'Adneukine', u'Bomba Locker'] | win.lyposit | [] | 2017-12-29 | | | |
| | | MacDownloader | [] | osx.macdownloader | [] | 2017-02-15 | | | |
| | | Machete | [u'El Machete'] | win.machete | [] | 2019-08-07 | | | |
| | | MacInstaller | [] | osx.macinstaller | [] | 2017-02-15 | | | |
| | | MacRansom | [] | osx.macransom | [] | 2017-06-13 | | | |
| | | MacSpy | [] | osx.macspy | [] | 2017-06-13 | | | |
| | | MacVX | [] | osx.macvx | [] | 2017-02-15 | | | |
| | | MadMax | [] | win.madmax | [] | 2016-12-28 | | | |
| | | Magala | [] | win.magala | [] | 2017-08-01 | | | |
| | | magecart | [] | js.magecart | [u'MageCart'] | 2019-06-23 | | | |
| | | Magniber | [] | win.magniber | [] | 2018-04-11 | | | |
| | | Maintools.js | [] | js.turla_maintools | [u'Turla Group'] | 2017-11-17 | | | |
| | | MajikPos | [] | win.majik_pos | [] | 2017-05-01 | | | |
| | | Makadocs | [] | win.makadocs | [] | 2018-06-28 | | | |
| | | MakLoader | [] | win.makloader | [] | 2018-10-03 | | | |
| | | Maktub | [] | win.maktub | [] | 2016-04-19 | | | |
| | | MalumPOS | [] | win.malumpos | [] | 2018-04-23 | | | |
| | | Mamba | [u'HDDCryptor', u'DiskCryptor'] | win.mamba | [] | 2017-02-15 | | | |
| | | MaMi | [] | osx.mami | [] | 2018-01-14 | | | |
| | | ManameCrypt | [u'CryptoHost'] | win.manamecrypt | [] | 2018-02-05 | | | |
| | | Mangzamel | [u'junidor', u'mengkite', u'vedratve'] | win.mangzamel | [] | 2019-08-07 | | | |
| | | Manifestus | [] | win.manifestus_ransomware | [] | | | | |
| | | ManItsMe | [] | win.manitsme | [u'Comment Crew'] | 2018-02-13 | | | |
| | | Maoloa | [] | win.maoloa | [] | 2019-06-21 | | | |
| | | MAPIget | [] | win.mapiget | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Marap | [] | win.marap | [] | 2018-08-24 | | | |
| | | Marcher | [u'ExoBot'] | apk.marcher | [] | 2017-08-31 | | | |
| | | Masuta | [u'PureMasuta'] | elf.masuta | [u'Nexus Zeta'] | 2019-02-07 | | | |
| | | Matrix Banker | [] | win.matrix_banker | [] | 2017-07-11 | | | |
| | | Matrix Ransom | [] | win.matrix_ransom | [] | 2018-12-02 | | | |
| | | Matryoshka RAT | [] | win.matryoshka_rat | [u'Rocket Kitten'] | 2017-09-14 | | | |
| | | Matsnu | [] | win.matsnu | [] | 2016-04-19 | | | |
| | | MazarBot | [] | apk.mazarbot | [] | 2017-04-19 | | | |
| | | MBRlock | [u'DexLocker'] | win.mbrlock | [] | 2018-03-01 | | | |
| | | Mebromi | [u'MyBios'] | win.mebromi | [] | 2018-06-28 | | | |
| | | MECHANICAL | [] | win.mechanical | [] | 2019-01-18 | | | |
| | | Medre | [] | win.medre | [] | 2018-06-28 | | | |
| | | Medusa | [] | win.medusa | [] | 2017-12-22 | | | |
| | | MegaCortex | [] | win.megacortex | [] | 2019-05-08 | | | |
| | | MeguminTrojan | [] | win.megumin | [] | 2019-05-03 | | | |
| | | Merlin | [] | win.merlin | [] | 2019-01-30 | | | |
| | | Metamorfo | [u'Casbaneiro'] | win.metamorfo | [] | 2019-08-08 | | | |
| | | Mewsei | [] | win.mewsei | [] | 2016-04-19 | | | |
| | | Miancha | [] | win.miancha | [] | 2017-05-21 | | | |
| | | Micrass | [] | win.micrass | [] | 2018-04-13 | | | |
| | | Microcin | [] | win.microcin | [] | 2017-11-09 | | | |
| | | Micropsia | [] | win.micropsia | [] | 2017-07-11 | | | |
| | | MiKey | [] | elf.mikey | [] | 2019-03-08 | | | |
| | | Mikoponi | [] | win.mikoponi | [] | | | | |
| | | MILKMAID | [] | win.milkmaid | [u'APT 30'] | 2018-04-26 | | | |
| | | MimiKatz | [] | win.mimikatz | [u'Anunak'] | 2019-04-25 | | | |
| | | MiniASP | [] | win.miniasp | [u'Comment Crew'] | 2018-02-10 | | | |
| | | MiniDuke | [] | win.miniduke | [u'APT 29'] | 2019-08-15 | | | |
| | | Mirage | [] | win.mirage | [u'Mirage'] | 2018-06-19 | | | |
| | | MirageFox | [] | win.miragefox | [u'Mirage'] | 2018-06-19 | | | |
| | | Mirai | [] | elf.mirai | [] | 2019-07-12 | | | |
| | | Mirai | [] | win.mirai | [] | 2017-02-13 | | | |
| | | Misdat | [] | win.misdat | [u'Dust Storm'] | 2018-01-23 | | | |
| | | Misfox | [u'MixFox', u'ModPack'] | win.misfox | [] | 2017-10-20 | | | |
| | | Miuref | [] | win.miuref | [] | 2016-04-19 | | | |
| | | MM Core | [] | win.mm_core | [] | 2017-04-06 | | | |
| | | MobiRAT | [] | win.mobi_rat | [] | 2017-08-31 | | | |
| | | Mocton | [] | win.mocton | [] | 2016-04-19 | | | |
| | | ModPOS | [u'straxbot'] | win.modpos | [] | 2018-04-23 | | | |
| | | Moker | [] | win.moker | [] | 2017-05-01 | | | |
| | | Mokes | [] | elf.mokes | [] | 2017-10-25 | | | |
| | | Mokes | [] | osx.mokes | [] | 2017-02-15 | | | |
| | | Mokes | [] | win.mokes | [] | 2017-10-25 | | | |
| | | Mole | [] | win.mole | [] | 2017-12-13 | | | |
| | | Molerat Loader | [] | win.molerat_loader | [u'Molerats'] | 2017-04-29 | | | |
| | | Monero Miner | [u'CoinMiner'] | win.monero_miner | [] | 2017-11-16 | | | |
| | | Monokle | [] | apk.monokle | [] | 2019-08-12 | | | |
| | | MoonWind | [] | win.moonwind | [] | 2017-04-05 | | | |
| | | Moose | [] | elf.moose | [] | 2017-02-15 | | | |
| | | More_eggs | [u'SpicyOmelette'] | js.more_eggs | [u'Cobalt'] | 2019-07-12 | | | |
| | | Morphine | [] | win.morphine | [] | 2017-08-22 | | | |
| | | Morto | [] | win.morto | [] | 2018-06-28 | | | |
| | | Mosquito | [] | win.mosquito | [u'Turla Group'] | 2018-10-23 | | | |
| | | Moure | [] | win.moure | [] | 2016-04-19 | | | |
| | | mozart | [] | win.mozart | [] | 2018-01-25 | | | |
| | | MPKBot | [u'MPK'] | win.mpkbot | [u'Magic Hound', u'Rocket Kitten'] | 2019-02-17 | | | |
| | | MrBlack | [] | elf.mrblack | [] | 2017-02-15 | | | |
| | | MS Exchange Tool | [] | win.exchange_tool | [u'Mirage'] | 2018-03-12 | | | |
| | | Mudwater | [] | apk.mudwater | [u'MuddyWater'] | 2019-06-23 | | | |
| | | Mughthesec | [] | osx.mughthesec | [] | 2017-08-10 | | | |
| | | Multigrain POS | [] | win.multigrain_pos | [] | 2018-02-07 | | | |
| | | murkytop | [] | win.murkytop | [u'Leviathan'] | 2019-03-09 | | | |
| | | Murofet | [] | win.murofet | [] | 2016-05-10 | | | |
| | | Mutabaha | [] | win.mutabaha | [] | 2017-02-15 | | | |
| | | MyDoom | [u'Novarg', u'Mimail'] | win.mydoom | [] | 2019-05-03 | | | |
| | | MyKings Spreader | [] | win.mykings_spreader | [] | 2018-02-07 | | | |
| | | MyloBot | [u'FakeDGA', u'WillExec'] | win.mylobot | [] | 2019-07-24 | | | |
| | | MysteryBot | [] | apk.mysterybot | [] | 2018-06-19 | | | |
| | | N40 | [] | win.n40 | [] | 2019-03-05 | | | |
| | | Nabucur | [] | win.nabucur | [] | 2016-05-31 | | | |
| | | Nagini | [] | win.nagini | [] | 2017-02-15 | | | |
| | | Naikon | [] | win.naikon | [u'Naikon'] | | | | |
| | | NanHaiShu | [] | js.nanhaishu | [u'Leviathan'] | 2019-03-25 | | | |
| | | Nanocore RAT | [] | win.nanocore | [u'APT33', u'The Gorgon Group'] | 2019-05-08 | | | |
| | | NanoLocker | [] | win.nano_locker | [] | 2017-02-15 | | | |
| | | Narilam | [] | win.narilam | [] | 2018-06-28 | | | |
| | | Nautilus | [] | win.nautilus | [u'Turla Group'] | 2018-02-26 | | | |
| | | NavRAT | [] | win.navrat | [u'APT37'] | 2018-06-07 | | | |
| | | Necurs | [u'nucurs'] | win.necurs | [] | 2018-08-21 | | | |
| | | Nemim | [u'Nemain'] | win.nemim | [u'DarkHotel'] | 2018-07-24 | | | |
| | | NetC | [] | win.netc | [u'Cleaver'] | 2017-05-21 | | | |
| | | NETEAGLE | [u'ScoutEagle'] | win.neteagle | [u'APT 30'] | 2018-04-26 | | | |
| | | Netrepser | [] | win.netrepser_keylogger | [] | 2017-05-12 | | | |
| | | NetSupportManager RAT | [] | win.netsupportmanager_rat | [] | 2017-09-14 | | | |
| | | NetTraveler | [u'TravNet'] | win.nettraveler | [u'NetTraveler'] | 2017-05-21 | | | |
| | | NetWire RC | [u'Recam'] | win.netwire | [u'APT33'] | 2019-05-18 | | | |
| | | Neuron | [] | win.neuron | [u'Turla Group'] | 2017-11-23 | | | |
| | | Neutrino | [u'Kasidet'] | win.neutrino | [] | 2019-06-23 | | | |
| | | Neutrino POS | [] | win.neutrino_pos | [] | 2017-07-12 | | | |
| | | NewCore RAT | [] | win.newcore_rat | [u'Hellsing'] | 2019-05-03 | | | |
| | | NewCT | [u'CT'] | win.new_ct | [u'DragonOK'] | 2018-03-27 | | | |
| | | NewPosThings | [] | win.newposthings | [] | 2018-04-23 | | | |
| | | NewsReels | [] | win.newsreels | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Nexster Bot | [] | win.nexster_bot | [] | 2017-04-29 | | | |
| | | NexusLogger | [] | win.nexus_logger | [] | 2017-03-28 | | | |
| | | Ngioweb | [] | elf.ngioweb | [] | 2019-06-27 | | | |
| | | Ngioweb | [u'Grobios'] | win.ngioweb | [] | 2019-08-07 | | | |
| | | NgrBot | [] | win.dorkbot_ngrbot | [] | 2018-06-19 | | | |
| | | Nightmare Spam Bot | [] | win.nightmare | [] | 2019-06-23 | | | |
| | | nitlove | [] | win.nitlove | [] | 2018-08-23 | | | |
| | | Nitol | [] | win.nitol | [] | 2017-09-14 | | | |
| | | NjRAT | [u'Bladabindi'] | win.njrat | [u'Operation C-Major', u'The Gorgon Group'] | 2019-04-07 | | | |
| | | Nocturnal Stealer | [] | win.nocturnalstealer | [] | 2018-06-13 | | | |
| | | Nokki | [] | win.nokki | [u'APT37'] | 2018-10-03 | | | |
| | | Nozelesn (Decryptor) | [] | win.nozelesn_decryptor | [] | 2018-07-09 | | | |
| | | nRansom | [] | win.nransom | [] | 2017-09-26 | | | |
| | | NVISOSPIT | [] | win.nvisospit | [] | 2019-06-23 | | | |
| | | Nymaim | [u'nymain'] | win.nymaim | [] | 2019-05-17 | | | |
| | | Nymaim2 | [] | win.nymaim2 | [] | 2018-05-01 | | | |
| | | OceanLotus | [] | osx.oceanlotus | [u'APT32'] | 2019-04-16 | | | |
| | | Oceansalt | [] | win.oceansalt | [] | 2018-10-19 | | | |
| | | Octopus | [] | win.octopus | [] | 2018-10-18 | | | |
| | | OddJob | [] | win.oddjob | [u'Equation Group'] | 2017-05-01 | | | |
| | | Odinaff | [] | win.odinaff | [] | 2017-02-15 | | | |
| | | OilRig | [] | ps1.oilrig | [u'OilRig', u'APT39', u'Chafer'] | 2019-02-02 | | | |
| | | Okrum | [] | win.okrum | [u'Mirage'] | 2019-07-31 | | | |
| | | OLDBAIT | [u'Sasfis'] | win.oldbait | [u'Sofacy'] | 2018-11-28 | | | |
| | | Olympic Destroyer | [] | win.olympic_destroyer | [] | 2018-06-19 | | | |
| | | Olyx | [] | osx.olyx | [] | 2018-06-28 | | | |
| | | OmniRAT | [] | apk.omnirat | [] | 2018-01-11 | | | |
| | | OneKeyLocker | [] | win.onekeylocker | [] | 2018-06-07 | | | |
| | | ONHAT | [] | win.onhat | [] | 2018-04-23 | | | |
| | | Oni Ransomware | [] | win.oni | [] | 2019-08-14 | | | |
| | | OnionDuke | [] | win.onionduke | [u'APT 29'] | 2018-09-29 | | | |
| | | OnlinerSpambot | [u'SBot', u'Onliner'] | win.onliner | [] | 2019-08-07 | | | |
| | | OopsIE | [] | win.oopsie | [u'OilRig'] | 2018-08-06 | | | |
| | | Opachki | [] | win.opachki | [] | 2018-06-28 | | | |
| | | OpBlockBuster | [] | win.op_blockbuster | [u'Lazarus Group'] | 2017-05-17 | | | |
| | | OpGhoul | [] | win.opghoul | [] | 2017-04-29 | | | |
| | | ORANGEADE | [] | win.orangeade | [u'APT 30'] | 2019-04-17 | | | |
| | | OrcaRAT | [] | win.orcarat | [] | 2018-09-30 | | | |
| | | Orcus RAT | [] | win.orcus_rat | [] | 2019-04-05 | | | |
| | | Ordinypt | [u'GermanWiper', u'HSDFSDCrypt'] | win.ordinypt | [] | 2019-08-04 | | | |
| | | Outlook Backdoor | [] | win.outlook_backdoor | [u'Turla Group'] | 2019-05-15 | | | |
| | | Overlay RAT | [] | win.overlay_rat | [] | 2018-09-20 | | | |
| | | OvidiyStealer | [] | win.ovidiystealer | [] | 2017-08-03 | | | |
| | | owaauth | [u'luckyowa'] | win.owaauth | [] | 2018-04-17 | | | |
| | | Owari | [] | elf.owari | [] | 2018-08-21 | | | |
| | | Ozone RAT | [] | win.ozone | [] | 2019-05-03 | | | |
| | | PadCrypt | [] | win.padcrypt | [] | 2017-02-15 | | | |
| | | paladin | [] | win.paladin | [u'Pitty Panda'] | 2018-09-30 | | | |
| | | PandaBanker | [u'ZeusPanda'] | win.pandabanker | [] | 2018-08-20 | | | |
| | | parasite_http | [] | win.parasite_http | [] | 2018-09-13 | | | |
| | | PAS | [] | php.pas | [] | 2017-02-15 | | | |
| | | Patcher | [u'FileCoder', u'Findzip'] | osx.patcher | [] | 2019-04-03 | | | |
| | | PC Surveillance System | [u'PSS'] | win.pss | [] | 2018-02-07 | | | |
| | | Peepy RAT | [] | win.peepy_rat | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | Penco | [] | win.penco | [] | 2018-07-24 | | | |
| | | Penquin Turla | [] | elf.penquin_turla | [u'Turla Group'] | 2017-04-05 | | | |
| | | PerlBot | [u'ShellBot', u'DDoS Perl IrcBot'] | elf.perlbot | [] | 2019-05-08 | | | |
| | | Persirai | [] | elf.persirai | [] | 2017-05-09 | | | |
| | | PetrWrap | [] | win.petrwrap | [] | 2017-07-17 | | | |
| | | Petya | [] | win.petya | [] | 2017-07-27 | | | |
| | | pgift | [u'ReRol'] | win.pgift | [u'Pitty Panda'] | 2018-01-25 | | | |
| | | PhanDoor | [] | win.phandoor | [u'Lazarus Group'] | 2018-11-19 | | | |
| | | Philadephia Ransom | [] | win.philadelphia_ransom | [] | 2018-01-25 | | | |
| | | PHOREAL | [u'Rizzo'] | win.phoreal | [u'APT32'] | 2019-02-22 | | | |
| | | Phorpiex | [u'Trik'] | win.phorpiex | [] | 2019-03-07 | | | |
| | | PICKPOCKET | [] | win.pickpocket | [u'APT34'] | 2019-07-31 | | | |
| | | PintSized | [] | osx.pintsized | [] | 2019-04-03 | | | |
| | | pipcreat | [] | win.pipcreat | [] | 2018-09-11 | | | |
| | | pirpi | [u'SHOTPUT', u'CookieCutter'] | win.pirpi | [u'UPS'] | 2019-05-08 | | | |
| | | Pirrit | [] | osx.pirrit | [] | 2019-03-12 | | | |
| | | Pitou | [] | win.pitou | [] | 2019-07-11 | | | |
| | | PittyTiger RAT | [] | win.pittytiger_rat | [] | 2018-01-19 | | | |
| | | Pkybot | [u'Pykbot', u'TBag', u'Bublik'] | win.pkybot | [] | 2018-02-15 | | | |
| | | PLAINTEE | [] | win.plaintee | [u'RANCOR'] | 2018-07-11 | | | |
| | | playwork | [] | win.playwork | [] | 2018-09-13 | | | |
| | | PLEAD | [u'TSCookie'] | win.plead | [] | 2019-05-30 | | | |
| | | Ploutus ATM | [] | win.ploutus_atm | [] | 2019-06-23 | | | |
| | | ployx | [] | win.ployx | [] | 2018-09-19 | | | |
| | | PlugX | [u'Destroy RAT', u'Korplug', u'Sogu'] | win.plugx | [u'APT31', u'DragonOK', u'Emissary Panda', u'Hellsing', u'Hurricane Panda', u'Leviathan', u'Nightshade Panda', u'Stone Panda', u'UPS'] | 2019-08-09 | | | |
| | | Plurox | [] | win.plurox | [] | 2019-07-08 | | | |
| | | pngdowner | [] | win.pngdowner | [u'Putter Panda'] | 2018-09-11 | | | |
| | | PocoDown | [] | win.pocodown | [u'Sofacy'] | 2019-07-20 | | | |
| | | Podec | [] | apk.podec | [] | 2018-11-07 | | | |
| | | Poison Ivy | [u'pivy', u'poisonivy'] | win.poison_ivy | [u'Molerats', u'Nightshade Panda', u'Stone Panda', u'Temper Panda', u'Tropic Trooper'] | 2019-08-07 | | | |
| | | poisonplug | [] | win.poisonplug | [u'APT41'] | 2019-08-13 | | | |
| | | Poldat | [u'Zlib', u'KABOB'] | win.poldat | [u'Stone Panda'] | 2019-07-08 | | | |
| | | Polyglot | [] | win.polyglot_ransom | [] | 2017-02-15 | | | |
| | | Pony | [u'Siplog', u'Fareit'] | win.pony | [] | 2018-08-20 | | | |
| | | PoohMilk Loader | [] | win.poohmilk | [u'APT37'] | 2017-11-16 | | | |
| | | PoorWeb | [] | win.poorweb | [] | 2019-06-12 | | | |
| | | Popcorn Time | [] | win.popcorn_time | [] | 2017-02-15 | | | |
| | | portless | [] | win.portless | [] | 2018-09-19 | | | |
| | | poscardstealer | [] | win.poscardstealer | [] | 2018-09-11 | | | |
| | | PoshC2 | [] | win.poshc2 | [u'APT33'] | 2019-05-23 | | | |
| | | POSHSPY | [] | ps1.poshspy | [u'APT 29'] | 2018-05-30 | | | |
| | | Poweliks | [] | win.poweliks | [] | 2019-07-31 | | | |
| | | PowerBrace | [] | ps1.powerbrace | [u'Lazarus Group'] | 2019-07-31 | | | |
| | | PowerCat | [] | win.powercat | [] | 2019-07-08 | | | |
| | | PowerDuke | [] | win.powerduke | [u'APT 29'] | 2017-09-24 | | | |
| | | powerkatz | [] | win.powerkatz | [] | 2019-04-03 | | | |
| | | POWERPIPE | [] | ps1.powerpipe | [u'Anunak'] | 2019-04-25 | | | |
| | | PowerPool | [] | win.powerpool | [] | 2018-09-07 | | | |
| | | PowerRatankba | [] | win.power_ratankba | [u'Lazarus Group'] | 2019-04-01 | | | |
| | | PowerShellRunner | [] | win.powershellrunner | [u'Turla Group'] | 2019-05-30 | | | |
| | | Powersniff | [] | win.powersniff | [] | 2019-02-05 | | | |
| | | POWERSOURCE | [] | ps1.powersource | [u'Anunak'] | 2019-04-24 | | | |
| | | PowerSpritz | [] | ps1.powerspritz | [u'Lazarus Group'] | 2019-01-23 | | | |
| | | POWERSTATS | [u'Valyria'] | ps1.powerstats | [u'MuddyWater'] | 2019-06-23 | | | |
| | | PowerWare | [] | ps1.powerware | [] | 2016-05-10 | | | |
| | | Powmet | [] | js.powmet | [] | 2017-08-03 | | | |
| | | POWRUNER | [] | ps1.powruner | [u'APT34'] | 2018-05-02 | | | |
| | | prb_backdoor | [] | win.prb_backdoor | [] | 2018-06-28 | | | |
| | | Predator The Thief | [] | win.predator | [] | 2019-03-12 | | | |
| | | Premier RAT | [] | apk.premier_rat | [] | 2019-01-23 | | | |
| | | PresFox | [] | ps1.presfox | [] | 2019-02-05 | | | |
| | | Prikorma | [] | win.prikormka | [] | 2018-02-21 | | | |
| | | Prilex | [] | win.prilex | [] | 2018-03-16 | | | |
| | | PrincessLocker | [] | win.princess_locker | [] | 2018-01-14 | | | |
| | | Project Alice | [u'PrAlice', u'AliceATM'] | win.alice_atm | [] | 2019-06-23 | | | |
| | | proteus | [] | win.proteus | [] | 2019-07-31 | | | |
| | | Proton RAT | [u'Calisto'] | osx.proton_rat | [] | 2018-08-24 | | | |
| | | ProtonBot | [] | win.protonbot | [] | 2019-05-24 | | | |
| | | PsiX | [] | win.psix | [] | 2019-03-31 | | | |
| | | PSLogger | [] | win.pslogger | [u'Lazarus Group'] | 2019-07-31 | | | |
| | | Pteranodon | [] | win.pteranodon | [u'Gamaredon Group', u'Operation Armageddon'] | 2019-06-26 | | | |
| | | PubNubRAT | [] | win.pubnubrat | [] | 2018-09-30 | | | |
| | | Punkey POS | [] | win.punkey_pos | [] | 2018-02-08 | | | |
| | | pupy | [] | elf.pupy | [] | 2019-01-20 | | | |
| | | pupy | [] | py.pupy | [] | 2019-01-20 | | | |
| | | pupy | [] | win.pupy | [u'Rocket Kitten', u'APT33', u'APT35'] | 2019-03-31 | | | |
| | | Pushdo | [] | win.pushdo | [] | 2018-09-27 | | | |
| | | Putabmow | [] | win.putabmow | [] | 2018-07-24 | | | |
| | | PvzOut | [] | win.pvzout | [u'Cleaver'] | 2017-05-21 | | | |
| | | Pwnet | [] | osx.pwnet | [] | 2018-01-28 | | | |
| | | pwnpos | [] | win.pwnpos | [] | 2018-09-11 | | | |
| | | Pykspa | [] | win.pykspa | [] | 2018-01-25 | | | |
| | | PyLocky | [u'Locky Locker'] | win.pylocky | [] | 2019-06-23 | | | |
| | | Qaccel | [] | win.qaccel | [] | 2018-07-24 | | | |
| | | Qadars | [] | win.qadars | [] | 2018-03-01 | | | |
| | | QakBot | [u'Qbot', u'Pinkslipbot'] | win.qakbot | [] | 2019-05-02 | | | |
| | | Qarallax RAT | [] | jar.qarallax_rat | [] | 2018-02-08 | | | |
| | | Qealler | [] | jar.qealler | [] | 2019-03-20 | | | |
| | | QHost | [u'Tolouge'] | win.qhost | [] | 2018-02-07 | | | |
| | | QNAPCrypt | [] | elf.qnapcrypt | [] | 2019-07-12 | | | |
| | | QRat | [u'Quaverse RAT'] | jar.qrat | [] | 2018-02-02 | | | |
| | | QtBot | [u'qtproject'] | win.qtbot | [] | 2017-11-07 | | | |
| | | QUADAGENT | [] | ps1.quadagent | [u'APT34'] | 2019-05-02 | | | |
| | | QuantLoader | [] | win.quantloader | [u'Guru Spider'] | 2019-06-21 | | | |
| | | Quasar RAT | [u'CinaRAT', u'Yggdrasil'] | win.quasar_rat | [u'APT33', u'Dropping Elephant', u'Stone Panda', u'The Gorgon Group'] | 2019-06-23 | | | |
| | | QUICKCAFE | [] | js.quickcafe | [u'Lazarus Group'] | 2019-08-19 | | | |
| | | Qulab | [] | win.qulab | [] | 2019-03-27 | | | |
| | | r2r2 | [] | elf.r2r2 | [] | 2018-06-13 | | | |
| | | r980 | [] | win.r980 | [] | 2017-02-15 | | | |
| | | Raccoon | [] | win.raccoon | [] | 2019-05-30 | | | |
| | | Radamant | [] | win.radamant | [] | 2017-02-15 | | | |
| | | RadRAT | [] | win.radrat | [] | 2018-04-23 | | | |
| | | Rakhni | [] | win.rakhni | [] | 2018-11-16 | | | |
| | | Rakos | [] | elf.rakos | [] | 2017-02-15 | | | |
| | | Rambo | [u'brebsd'] | win.rambo | [u'DragonOK'] | 2019-03-06 | | | |
| | | Ramdo | [] | win.ramdo | [] | 2016-04-20 | | | |
| | | Ramnit | [u'Nimnul'] | win.ramnit | [] | 2019-06-23 | | | |
| | | Ranbyus | [] | win.ranbyus | [] | 2018-02-10 | | | |
| | | Ranscam | [] | win.ranscam | [] | 2017-02-15 | | | |
| | | Ransoc | [] | win.ransoc | [] | 2016-12-28 | | | |
| | | Ransomlock | [u'WinLock'] | win.ransomlock | [] | 2018-01-02 | | | |
| | | Rapid Ransom | [] | win.rapid_ransom | [] | 2018-06-13 | | | |
| | | RapidStealer | [] | win.rapid_stealer | [u'IXESHE'] | 2017-05-21 | | | |
| | | Rarog | [] | win.rarog | [] | 2019-01-06 | | | |
| | | rarstar | [] | win.rarstar | [u'Tick'] | 2018-09-13 | | | |
| | | RatabankaPOS | [] | win.ratabankapos | [u'Lazarus Group'] | 2018-02-27 | | | |
| | | RatSnif | [] | win.ratsnif | [u'APT32'] | 2019-07-11 | | | |
| | | Ratty | [] | jar.ratty | [] | 2018-05-16 | | | |
| | | rat_hodin | [] | elf.rat_hodin | [] | 2019-08-12 | | | |
| | | RawPOS | [] | win.rawpos | [] | 2018-09-07 | | | |
| | | Raxir | [] | apk.raxir | [] | 2017-02-15 | | | |
| | | rbs_srv | [] | elf.rbs_srv | [] | 2019-08-12 | | | |
| | | RCS | [u'Remote Control System', u'Crisis'] | win.rcs | [] | 2019-06-14 | | | |
| | | rdasrv | [] | win.rdasrv | [] | 2018-04-26 | | | |
| | | ReactorBot | [] | win.reactorbot | [] | 2017-06-07 | | | |
| | | Reaver | [] | win.reaver | [] | 2019-05-17 | | | |
| | | Red Alert | [] | win.red_alert | [] | 2017-02-15 | | | |
| | | Red Gambler | [] | win.red_gambler | [] | 2018-07-11 | | | |
| | | RedAlert2 | [] | apk.redalert2 | [] | 2019-02-15 | | | |
| | | RedAlpha | [] | win.redalpha | [] | 2018-07-06 | | | |
| | | RedLeaves | [u'BUGJUICE'] | win.redleaves | [u'Stone Panda'] | 2019-06-24 | | | |
| | | RedPepper | [] | win.redpepper | [u'PLATINUM'] | 2019-06-23 | | | |
| | | RedSalt | [] | win.redsalt | [u'PLATINUM'] | 2019-06-23 | | | |
| | | Redyms | [] | win.redyms | [] | 2018-10-18 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2018-04-13 | | | |
| | | Regin | [] | win.regin | [] | 2018-06-19 | | | |
| | | Remcos | [] | win.remcos | [u'APT33', u'The Gorgon Group'] | 2019-05-18 | | | |
| | | Remexi | [] | win.remexi | [u'APT39', u'Chafer'] | 2019-02-03 | | | |
| | | Remsec | [] | win.remsec_strider | [u'ProjectSauron'] | 2017-02-15 | | | |
| | | Remy | [u'WINDSHIELD'] | win.remy | [] | 2019-06-17 | | | |
| | | reptile | [] | elf.reptile | [] | 2019-06-04 | | | |
| | | Rerdom | [] | win.rerdom | [] | 2018-08-10 | | | |
| | | Retadup | [] | win.retadup | [] | 2017-07-12 | | | |
| | | Retefe | [] | apk.retefe | [] | 2017-12-19 | | | |
| | | Retefe | [u'Tsukuba', u'Werdlod'] | win.retefe | [] | 2019-05-23 | | | |
| | | Revenge RAT | [u'Revetrat'] | win.revenge_rat | [u'The Gorgon Group'] | 2018-07-24 | | | |
| | | Rex | [] | elf.rex | [] | 2017-02-15 | | | |
| | | RGDoor | [] | win.rgdoor | [] | 2018-01-28 | | | |
| | | Rietspoof | [] | win.rietspoof | [] | 2019-07-12 | | | |
| | | Rifdoor | [] | win.rifdoor | [u'Lazarus Group'] | 2018-11-19 | | | |
| | | Rikamanu | [] | win.rikamanu | [u'Thrip'] | 2018-06-25 | | | |
| | | Riltok | [] | apk.riltok | [] | 2019-07-08 | | | |
| | | Rincux | [] | win.rincux | [] | 2018-10-26 | | | |
| | | Ripper ATM | [] | win.ripper_atm | [] | 2017-02-15 | | | |
| | | Rising Sun | [] | win.rising_sun | [u'Operation Sharpshooter'] | 2018-12-19 | | | |
| | | RMS | [u'Remote Manipulator System'] | win.rms | [u'TA505'] | 2019-06-17 | | | |
| | | Roaming Mantis | [] | apk.roaming_mantis | [] | 2018-05-29 | | | |
| | | RobinHood | [u'RobbinHood'] | win.robinhood | [] | 2019-07-04 | | | |
| | | rock | [u'yellowalbatross'] | win.rock | [] | 2018-09-19 | | | |
| | | Rockloader | [] | win.rockloader | [] | 2016-04-20 | | | |
| | | Rofin | [] | win.rofin | [] | 2016-04-20 | | | |
| | | RogueRobin | [] | ps1.roguerobin | [u'DarkHydrus'] | 2018-08-03 | | | |
| | | RogueRobinNET | [] | win.roguerobin | [u'DarkHydrus'] | 2019-03-21 | | | |
| | | Rokku | [] | win.rokku | [] | 2016-04-20 | | | |
| | | RokRAT | [u'DOGCALL'] | win.rokrat | [u'APT37'] | 2019-05-17 | | | |
| | | Rombertik | [u'CarbonGrabber'] | win.rombertik | [] | 2017-05-21 | | | |
| | | Romeo(Alfa,Bravo, ...) | [] | win.romeos | [u'Lazarus Group'] | 2017-05-17 | | | |
| | | Roopirs | [] | win.roopirs | [] | 2018-07-24 | | | |
| | | Rootnik | [] | apk.rootnik | [] | 2017-02-02 | | | |
| | | Roseam | [] | win.roseam | [u'Wekby'] | 2016-12-28 | | | |
| | | RotorCrypt | [u'Rotor', u'RotoCrypt'] | win.rotorcrypt | [] | 2019-04-07 | | | |
| | | Rover | [] | win.rover | [] | 2016-04-20 | | | |
| | | Rovnix | [u'Mayachok', u'Cidox', u'BkLoader'] | win.rovnix | [] | 2017-07-05 | | | |
| | | Royal DNS | [] | win.royal_dns | [u'Mirage'] | 2019-07-31 | | | |
| | | RoyalCli | [] | win.royalcli | [u'Mirage'] | 2019-07-31 | | | |
| | | Rozena | [] | win.rozena | [] | 2018-07-06 | | | |
| | | RTM | [u'Redaman'] | win.rtm | [] | 2019-08-02 | | | |
| | | rtpos | [] | win.rtpos | [] | 2018-08-31 | | | |
| | | Ruckguv | [] | win.ruckguv | [] | 2018-03-01 | | | |
| | | Rumish | [] | win.rumish | [] | 2018-07-24 | | | |
| | | running_rat | [] | win.runningrat | [] | 2018-02-13 | | | |
| | | Rurktar | [u'RCSU'] | win.rurktar | [] | 2017-08-31 | | | |
| | | Rustock | [] | win.rustock | [] | 2018-06-28 | | | |
| | | Ryuk | [] | win.ryuk | [u'FIN6', u'GRIM SPIDER'] | 2019-06-23 | | | |
| | | Saefko | [] | win.saefko | [] | 2019-08-09 | | | |
| | | SAGE | [u'Saga'] | win.sage_ransom | [] | 2019-07-20 | | | |
| | | Sakula RAT | [u'Sakurel'] | win.sakula_rat | [u'Hurricane Panda'] | 2018-11-16 | | | |
| | | Salgorea | [] | win.salgorea | [u'APT32'] | 2018-03-14 | | | |
| | | Sality | [] | win.sality | [u'Salty Spider'] | 2019-02-19 | | | |
| | | SamSam | [] | win.samsam | [u'Boss Spider'] | 2018-11-28 | | | |
| | | Sanny | [u'Daws'] | win.sanny | [] | 2018-06-28 | | | |
| | | Saphyra | [] | py.saphyra | [] | 2017-02-15 | | | |
| | | SappyCache | [] | win.sappycache | [] | 2019-03-29 | | | |
| | | Sarhust | [u'Hussarini'] | win.sarhust | [] | 2018-07-10 | | | |
| | | Sasfis | [u'Oficla'] | win.sasfis | [] | 2018-11-28 | | | |
| | | Satan Ransomware | [u'DBGer', u'Lucky Ransomware'] | win.satan | [] | 2019-01-18 | | | |
| | | Satana | [] | win.satana | [] | 2018-01-11 | | | |
| | | Sathurbot | [] | win.sathurbot | [] | 2017-04-10 | | | |
| | | Satori | [] | elf.satori | [] | 2018-09-03 | | | |
| | | Sauron Locker | [] | apk.sauron_locker | [] | 2019-04-16 | | | |
| | | scanbox | [] | js.scanbox | [u'Leviathan'] | 2019-03-19 | | | |
| | | ScanPOS | [] | win.scanpos | [] | 2019-03-08 | | | |
| | | Scarabey | [u'MVP', u'Scarab-Russian', u'Scarab'] | win.scarabey | [] | 2019-08-19 | | | |
| | | Schneiken | [] | win.schneiken | [] | 2018-04-27 | | | |
| | | Scote | [] | win.scote | [u'TopHat', u'DustySky'] | 2018-02-26 | | | |
| | | Scranos | [] | win.scranos | [] | 2019-07-12 | | | |
| | | ScreenLocker | [] | win.screenlocker | [] | 2017-02-15 | | | |
| | | SeaDaddy | [] | win.seadaddy | [u'APT 29'] | 2017-05-03 | | | |
| | | SeaSalt | [] | win.seasalt | [u'Comment Crew'] | 2018-02-13 | | | |
| | | SeDll | [] | win.sedll | [u'Leviathan'] | 2018-11-14 | | | |
| | | Sedreco | [u'azzy', u'eviltoss'] | win.sedreco | [u'Sofacy'] | 2018-11-28 | | | |
| | | Seduploader | [u'jhuhugit', u'jkeyskw', u'downrage', u'carberplike'] | win.seduploader | [u'Sofacy'] | 2017-09-01 | | | |
| | | SendSafe | [] | win.sendsafe | [] | 2017-05-19 | | | |
| | | Serpico | [] | win.serpico | [] | 2017-02-15 | | | |
| | | ServHelper | [] | win.servhelper | [u'TA505'] | 2019-04-27 | | | |
| | | shadowhammer | [] | win.shadowhammer | [u'Operation ShadowHammer'] | 2019-05-21 | | | |
| | | ShadowPad | [u'XShellGhost'] | win.shadowpad | [u'Axiom'] | 2019-05-02 | | | |
| | | Shakti | [] | win.shakti | [] | 2017-02-15 | | | |
| | | SHAPESHIFT | [] | win.shapeshift | [u'APT33'] | 2017-09-29 | | | |
| | | shareip | [u'remotecmd'] | win.shareip | [u'UPS'] | 2018-04-17 | | | |
| | | SHARPKNOT | [u'Bitrep'] | win.sharpknot | [u'Silent Chollima'] | 2018-04-13 | | | |
| | | SHARPSTATS | [] | win.sharpstats | [u'MuddyWater'] | 2019-06-23 | | | |
| | | ShellBind | [] | elf.shellbind | [] | 2017-08-31 | | | |
| | | ShellLocker | [] | win.shelllocker | [] | 2017-02-15 | | | |
| | | Shifu | [] | win.shifu | [] | 2016-04-20 | | | |
| | | Shim RAT | [] | win.shimrat | [u'Mofang'] | 2018-02-13 | | | |
| | | SHIPSHAPE | [] | win.shipshape | [u'APT 30'] | 2019-04-17 | | | |
| | | Shishiga | [] | elf.shishiga | [] | 2017-05-01 | | | |
| | | Shujin | [] | win.shujin | [] | 2018-02-21 | | | |
| | | Shurl0ckr | [] | win.shurl0ckr | [] | 2018-02-27 | | | |
| | | Shylock | [u'Caphaw'] | win.shylock | [] | 2018-06-28 | | | |
| | | SideWinder | [] | win.sidewinder | [] | 2018-07-26 | | | |
| | | Sierra(Alfa,Bravo, ...) | [u'Destover'] | win.sierras | [u'Lazarus Group'] | 2018-04-27 | | | |
| | | Siggen6 | [] | win.siggen6 | [] | 2016-12-28 | | | |
| | | Silence | [u'TrueBot'] | win.silence | [u'Silence group'] | 2019-02-21 | | | |
| | | Silence DDoS | [] | pl.silence_ddos | [] | 2018-09-06 | | | |
| | | Silon | [] | win.silon | [] | 2018-06-28 | | | |
| | | Siluhdur | [] | win.siluhdur | [] | 2018-07-24 | | | |
| | | Simda | [u'iBank'] | win.simda | [] | 2018-03-21 | | | |
| | | Sinowal | [u'Theola', u'Quarian', u'Mebroot', u'Anserin', u'Torpig'] | win.sinowal | [] | 2018-07-23 | | | |
| | | Sisfader | [] | win.sisfader | [u'Hellsing'] | 2018-08-03 | | | |
| | | Skarab Ransom | [] | win.skarab_ransom | [] | 2017-12-14 | | | |
| | | Skimer | [] | win.skimer | [] | 2019-06-23 | | | |
| | | Skipper | [] | win.skipper | [u'Turla Group'] | 2019-06-12 | | | |
| | | Skygofree | [] | apk.skygofree | [] | 2018-02-07 | | | |
| | | Skyplex | [] | win.skyplex | [] | 2017-02-15 | | | |
| | | skyrat | [] | ps1.skyrat | [] | 2019-06-17 | | | |
| | | Slave | [] | win.slave | [] | 2017-05-22 | | | |
| | | Slempo | [u'SlemBunk'] | apk.slempo | [] | 2018-01-29 | | | |
| | | Slingshot | [] | win.slingshot | [] | 2018-09-19 | | | |
| | | Sliver | [] | win.sliver | [] | 2019-06-23 | | | |
| | | sLoad | [] | ps1.sload | [] | 2019-08-03 | | | |
| | | Slocker | [] | apk.slocker | [] | 2017-07-07 | | | |
| | | SLUB | [] | win.slub | [] | 2019-03-07 | | | |
| | | smac | [u'speccom'] | win.smac | [] | 2018-01-25 | | | |
| | | SmokeLoader | [u'Dofoil'] | win.smokeloader | [] | 2019-07-10 | | | |
| | | Smominru | [u'Ismo'] | win.smominru | [] | 2018-02-07 | | | |
| | | Smrss32 Ransomware | [] | win.smrss32 | [] | 2018-11-19 | | | |
| | | SMSspy | [] | apk.smsspy | [] | 2017-11-09 | | | |
| | | SnatchLoader | [] | win.snatch_loader | [] | 2017-12-15 | | | |
| | | SNEEPY | [u'ByeByeShell'] | win.sneepy | [] | 2017-11-17 | | | |
| | | Snifula | [u'Ursnif'] | win.snifula | [] | 2017-05-30 | | | |
| | | Snojan | [] | win.snojan | [] | 2018-01-23 | | | |
| | | SNS Locker | [] | win.snslocker | [] | 2016-06-02 | | | |
| | | Sobaken | [] | win.sobaken | [] | 2018-07-24 | | | |
| | | Sobig | [u'Palyh'] | win.sobig | [] | 2019-05-20 | | | |
| | | Socks5 Systemz | [] | win.socks5_systemz | [] | 2016-05-10 | | | |
| | | SocksBot | [u'BIRDDOG', u'Nadrac'] | win.socksbot | [u'Anunak'] | 2019-04-15 | | | |
| | | Sodinokibi | [u'REvil', u'Sodin'] | win.sodinokibi | [] | 2019-07-29 | | | |
| | | Solarbot | [u'Napolar'] | win.solarbot | [] | 2017-05-11 | | | |
| | | soraya | [] | win.soraya | [] | 2018-09-07 | | | |
| | | Sorgu | [] | win.sorgu | [u'Leafminer'] | 2018-08-03 | | | |
| | | SOUNDBITE | [u'denis'] | win.soundbite | [u'APT32'] | 2019-05-16 | | | |
| | | SPACESHIP | [] | win.spaceship | [u'APT 30'] | 2019-04-17 | | | |
| | | Spamtorte | [] | elf.spamtorte | [] | 2017-02-15 | | | |
| | | Sparkle | [] | win.sparkle | [] | 2019-05-17 | | | |
| | | SpeakUp | [] | elf.speakup | [] | 2019-02-07 | | | |
| | | Spedear | [] | win.spedear | [u'Thrip'] | 2018-06-25 | | | |
| | | Spora | [] | win.spora_ransom | [] | 2017-12-18 | | | |
| | | SpyBanker | [] | apk.spybanker | [] | 2017-02-24 | | | |
| | | SpyBot | [] | win.spybot | [] | 2016-04-26 | | | |
| | | SpyEye | [] | win.spyeye | [] | 2019-07-11 | | | |
| | | SpyNote | [] | apk.spynote | [u'OilRig'] | 2018-08-06 | | | |
| | | SQLRat | [] | js.sqlrat | [u'Anunak'] | 2019-04-04 | | | |
| | | SquirtDanger | [] | win.squirtdanger | [] | 2018-04-18 | | | |
| | | SSHDoor | [] | elf.sshdoor | [] | 2018-06-28 | | | |
| | | SslMM | [] | win.sslmm | [u'Naikon'] | | | | |
| | | Stabuniq | [] | win.stabuniq | [] | | | | |
| | | Stampedo | [] | win.stampedo | [] | 2017-02-15 | | | |
| | | Stantinko | [] | elf.stantinko | [] | 2017-12-07 | | | |
| | | StarCruft | [] | win.starcruft | [u'APT37'] | 2018-04-26 | | | |
| | | StarLoader | [] | win.starloader | [u'Sowbug'] | 2017-11-21 | | | |
| | | StarsyPound | [] | win.starsypound | [u'Comment Crew'] | 2018-02-10 | | | |
| | | StartPage | [u'Easy Television Access Now'] | win.startpage | [] | 2019-02-27 | | | |
| | | Stealth Mango | [] | apk.stealthmango | [u'Operation C-Major', u'Stealth Mango'] | 2019-08-09 | | | |
| | | StealthAgent | [] | apk.stealthagent | [] | 2018-05-16 | | | |
| | | StealthWorker Go | [] | win.stealthworker | [] | 2019-03-07 | | | |
| | | StegoLoader | [] | win.stegoloader | [] | 2017-02-15 | | | |
| | | Stinger | [] | win.stinger | [] | 2018-03-19 | | | |
| | | STOP Ransomware | [u'KeyPass', u'Djvu'] | win.stop | [] | 2019-01-23 | | | |
| | | Stration | [] | win.stration | [] | 2018-07-24 | | | |
| | | Stresspaint | [] | win.stresspaint | [] | 2018-04-20 | | | |
| | | StrongPity | [] | win.strongpity | [u'StrongPity'] | 2017-12-15 | | | |
| | | Stuxnet | [] | win.stuxnet | [] | 2019-04-18 | | | |
| | | Sunless | [] | elf.sunless | [] | 2019-01-23 | | | |
| | | SunOrcal | [] | win.sunorcal | [] | 2017-11-21 | | | |
| | | SuppoBox | [u'Nivdort', u'Bayrob'] | win.suppobox | [] | 2019-04-16 | | | |
| | | SupremeBot | [u'BlazeBot'] | jar.supremebot | [] | 2019-03-07 | | | |
| | | Svpeng | [] | apk.svpeng | [] | 2017-08-04 | | | |
| | | swen | [] | win.swen | [] | 2019-07-31 | | | |
| | | Swift? | [] | win.swift | [u'Lazarus Group'] | 2017-05-17 | | | |
| | | Switcher | [] | apk.switcher | [] | 2017-02-15 | | | |
| | | Sword | [] | win.sword | [u'Comment Crew'] | 2018-02-13 | | | |
| | | sykipot | [u'getkys'] | win.sykipot | [] | 2018-02-21 | | | |
| | | SynAck | [] | win.synack | [] | 2018-05-14 | | | |
| | | SyncCrypt | [] | win.synccrypt | [] | 2017-09-14 | | | |
| | | SynFlooder | [] | win.synflooder | [u'Cleaver'] | 2017-05-21 | | | |
| | | Synth Loader | [] | win.synth_loader | [] | 2017-02-15 | | | |
| | | Sys10 | [] | win.sys10 | [u'Naikon'] | | | | |
| | | Syscon | [] | win.syscon | [] | 2018-03-09 | | | |
| | | SysGet | [] | win.sysget | [u'DragonOK'] | 2017-02-15 | | | |
| | | Sysraw Stealer | [u'Clipsa'] | win.sysraw_stealer | [] | 2019-08-07 | | | |
| | | SysScan | [] | win.sysscan | [] | 2017-02-15 | | | |
| | | SystemBC | [] | win.systembc | [] | 2019-08-02 | | | |
| | | systemd | [] | osx.systemd | [] | 2018-01-28 | | | |
| | | Szribi | [] | win.szribi | [] | 2018-01-17 | | | |
| | | TabMsgSQL | [] | win.tabmsgsql | [u'Comment Crew'] | 2018-02-13 | | | |
| | | taidoor | [u'simbot'] | win.taidoor | [] | 2019-03-09 | | | |
| | | TalentRAT | [u'Assassin RAT'] | apk.talent_rat | [] | 2019-04-16 | | | |
| | | Taleret | [] | win.taleret | [] | 2018-02-10 | | | |
| | | Tandfuy | [] | win.tandfuy | [] | 2018-07-24 | | | |
| | | Tapaoux | [] | win.tapaoux | [u'DarkHotel'] | 2018-05-03 | | | |
| | | Tarsip | [] | win.tarsip | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Tater PrivEsc | [] | ps1.tater | [] | 2017-02-04 | | | |
| |