| | | Immortal Stealer | [] | win.immortal_stealer | [] | 2020-06-08 | | | |
| | | 404 Keylogger | [u'404KeyLogger'] | win.404keylogger | [] | 2020-07-13 | | | |
| | | 7ev3n | [] | win.7ev3n | [] | 2018-01-23 | | | |
| | | 8.t Dropper | [u'8t_dropper', u'RoyalRoad'] | win.8t_dropper | [u'Hellsing', u'Ice Fog', u'Pirate Panda', u'RANCOR', u'TA428', u'Tick', u'Tonto Team', u'Karma Panda'] | 2021-01-05 | | | |
| | | 9002 RAT | [u'McRAT', u'Hydraq', u'HOMEUNIX'] | win.9002 | [u'Aurora Panda', u'APT31', u'Group 27'] | 2020-07-11 | | | |
| | | Abaddon | [] | win.abaddon | [] | 2020-10-27 | | | |
| | | AbaddonPOS | [u'PinkKite', u'TinyPOS'] | win.abaddon_pos | [] | 2020-11-09 | | | |
| | | abantes | [] | win.abantes | [] | 2018-10-18 | | | |
| | | Abbath Banker | [] | win.abbath_banker | [] | 2016-12-28 | | | |
| | | AbSent Loader | [] | win.absentloader | [] | 2020-05-18 | | | |
| | | ACBackdoor | [] | elf.acbackdoor | [] | 2019-11-22 | | | |
| | | ACBackdoor | [] | win.acbackdoor | [] | 2019-11-22 | | | |
| | | ACEHASH | [] | win.acehash | [u'APT41'] | 2020-05-23 | | | |
| | | AcidBox | [u'MagicScroll'] | win.acidbox | [] | 2020-08-14 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | ActionSpy | [u'AxeSpy'] | apk.actionspy | [u'POISON CARP'] | 2020-06-12 | | | |
| | | Adamantium Thief | [] | win.adamantium_thief | [] | 2020-03-13 | | | |
| | | AdamLocker | [] | win.adam_locker | [] | 2018-01-04 | | | |
| | | Adhubllka | [] | win.adhubllka | [] | 2020-07-23 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdoBot | [] | apk.adobot | [] | 2020-04-07 | | | |
| | | AdultSwine | [] | apk.adultswine | [] | 2018-01-23 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | AdWind | [u'AlienSpy', u'JSocket', u'Frutas', u'UNRECOM', u'JBifrost', u'Sockrat'] | jar.adwind | [] | 2020-07-30 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2017-05-18 | | | |
| | | Adzok | [] | jar.adzok | [u'Packrat'] | 2020-05-18 | | | |
| | | Afrodita | [] | win.afrodita | [] | 2020-03-27 | | | |
| | | AgeLocker | [] | elf.age_locker | [] | 2020-12-26 | | | |
| | | Agent Tesla | [u'AgenTesla', u'AgentTesla', u'Negasteal'] | win.agent_tesla | [u'SWEED'] | 2020-12-26 | | | |
| | | Agent.BTZ | [u'ComRAT', u'Minit', u'Sun rootkit'] | win.agent_btz | [u'Turla Group'] | 2021-01-05 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2020-11-09 | | | |
| | | AhMyth | [] | apk.ahmyth | [] | 2020-11-23 | | | |
| | | AIRBREAK | [u'Orz'] | js.airbreak | [u'Leviathan'] | 2020-05-23 | | | |
| | | AirDropBot | [u'CloudBot'] | elf.airdrop | [] | 2019-10-04 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2020-06-24 | | | |
| | | Albaniiutas | [] | win.albaniiutas | [u'TA428'] | 2021-01-01 | | | |
| | | Aldibot | [] | win.aldibot | [] | 2018-09-19 | | | |
| | | Alfonso Stealer | [] | win.alfonso_stealer | [] | 2021-01-11 | | | |
| | | Alien | [] | apk.alien | [] | 2020-09-25 | | | |
| | | Alina POS | [u'alina_spark', u'katrina', u'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | AllaKore | [] | win.allakore | [] | 2020-09-25 | | | |
| | | Allaple | [u'Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | [u'OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | Almanahe | [] | win.almanahe | [] | 2020-07-15 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | Alphabet Ransomware | [] | win.alphabet_ransomware | [] | 2017-01-10 | | | |
| | | AlphaLocker | [] | win.alphalocker | [] | 2018-01-11 | | | |
| | | AlphaNC | [] | win.alphanc | [u'Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | [u'Lazarus Group'] | 2017-05-17 | | | |
| | | Alureon | [u'Olmarik', u'Pihar', u'TDL', u'TDSS', u'wowlik'] | win.alureon | [] | 2020-03-04 | | | |
| | | Amadey | [] | win.amadey | [] | 2020-06-24 | | | |
| | | AMTsol | [u'Adupihan'] | win.amtsol | [u'PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anchor | [] | win.anchor | [u'WIZARD SPIDER'] | 2020-11-02 | | | |
| | | Anchor_DNS | [] | elf.anchor_dns | [] | 2020-12-26 | | | |
| | | Andromeda | [u'Gamarue', u'B106-Gamarue', u'B67-SS-Gamarue', u'b66'] | win.andromeda | [u'Operation C-Major'] | 2021-01-04 | | | |
| | | AndroMut | [u'Gelup'] | win.andromut | [u'TA505'] | 2020-12-15 | | | |
| | | AndroRAT | [] | apk.androrat | [u'Dropping Elephant'] | 2020-11-23 | | | |
| | | Anel | [u'UPPERCUT', u'lena'] | win.anel | [u'Stone Panda'] | 2020-05-23 | | | |
| | | ANGRYREBEL | [u'Ghost RAT'] | elf.angryrebel | [u'APT 22'] | 2020-05-23 | | | |
| | | Ani-Shell | [u'anishell'] | php.anishell | [] | 2019-10-24 | | | |
| | | ANTAK | [] | php.antak | [u'APT39', u'Anunak'] | 2020-06-25 | | | |
| | | AnteFrigus Ransomware | [] | win.antefrigus | [] | 2020-01-17 | | | |
| | | Antilam | [u'Latinus'] | win.antilam | [] | 2018-07-24 | | | |
| | | Anubis | [u'BankBot', u'android.bankbot', u'android.bankspy'] | apk.anubis | [] | 2020-12-10 | | | |
| | | Anubis | [u'Anubis Stealer'] | win.anubis | [] | 2020-09-01 | | | |
| | | AnubisSpy | [] | apk.anubisspy | [u'Sphinx (APT-C-15)'] | 2017-12-22 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | AppleJeus | [] | osx.applejeus | [u'Lazarus Group'] | 2021-01-11 | | | |
| | | AppleJeus | [] | win.applejeus | [u'Lazarus Group'] | 2020-02-27 | | | |
| | | Appleseed | [] | win.appleseed | [u'Kimsuky'] | 2020-12-16 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | [u'UPS'] | 2017-05-12 | | | |
| | | Archivist | [] | py.archivist | [] | 2020-03-13 | | | |
| | | ArdaMax | [] | win.ardamax | [] | 2019-10-23 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | Ares | [] | py.ares | [] | 2020-03-03 | | | |
| | | Aria-body | [] | win.ariabody | [u'Naikon'] | 2020-07-06 | | | |
| | | Arik Keylogger | [u'Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | [u'ArkeiStealer'] | win.arkei_stealer | [] | 2020-07-30 | | | |
| | | ARS VBS Loader | [] | win.ars_loader | [] | 2018-10-25 | | | |
| | | ARTFULPIE | [] | win.artfulpie | [u'Lazarus Group'] | 2020-02-27 | | | |
| | | Artra Downloader | [] | win.artra | [u'Dropping Elephant'] | 2020-06-21 | | | |
| | | Asacub | [] | apk.asacub | [] | 2020-02-26 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | Ashas | [] | apk.ashas | [] | 2019-10-28 | | | |
| | | ASPC | [] | win.aspc | [] | 2017-05-19 | | | |
| | | Asprox | [u'Aseljo', u'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | Asruex | [] | win.asruex | [u'DarkHotel'] | 2020-06-16 | | | |
| | | Astaroth | [u'Guildma'] | win.astaroth | [] | 2020-12-26 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2020-12-10 | | | |
| | | ATANK | [] | apk.atank | [] | 2020-08-12 | | | |
| | | AthenaGo RAT | [] | win.athenago | [] | 2017-02-13 | | | |
| | | ATI-Agent | [] | win.ati_agent | [u'APT 29'] | 2018-06-07 | | | |
| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2020-04-26 | | | |
| | | Atmosphere | [] | win.atmosphere | [u'Silence group'] | 2019-05-10 | | | |
| | | ATMSpitter | [] | win.atmspitter | [u'Cobalt'] | 2020-05-23 | | | |
| | | Attor | [] | win.attor | [] | 2020-04-06 | | | |
| | | August Stealer | [] | win.august_stealer | [] | 2017-01-10 | | | |
| | | Auriga | [u'Riodrv'] | win.auriga | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | [u'OneKeyLocker'] | win.aurora | [u'Oktropys'] | 2020-03-02 | | | |
| | | AutoCAD Downloader | [u'Acad.Bursted', u'Duxfas'] | fas.acad | [] | 2019-01-09 | | | |
| | | Avaddon Ransomware | [] | win.avaddon | [] | 2020-12-08 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2018-03-26 | | | |
| | | Ave Maria | [u'AVE_MARIA', u'AveMariaRAT', u'Warzone RAT', u'avemaria'] | win.ave_maria | [u'Anunak'] | 2021-01-13 | | | |
| | | Aveo | [] | win.aveo | [] | 2020-05-23 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | azazel | [] | elf.azazel | [] | 2019-08-26 | | | |
| | | Azorult | [u'PuffStealer', u'Rultazo'] | win.azorult | [u'The Gorgon Group'] | 2020-12-15 | | | |
| | | Babar | [u'SNOWBALL'] | win.babar | [u'SNOWGLOBE'] | 2020-06-08 | | | |
| | | Babuk Ransomware | [u'Vasa Locker'] | win.babuk | [] | 2021-01-10 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2019-04-23 | | | |
| | | BABYMETAL | [] | win.babymetal | [u'Anunak'] | 2020-06-25 | | | |
| | | BabyShark | [] | win.babyshark | [u'Kimsuky'] | 2020-11-17 | | | |
| | | BACKBEND | [] | win.backbend | [u'APT 30'] | 2019-04-17 | | | |
| | | BackNet | [] | win.backnet | [] | 2018-11-19 | | | |
| | | backspace | [u'Lecna', u'ZRLnk'] | win.backspace | [u'APT 30'] | 2020-06-20 | | | |
| | | BackSwap | [] | win.backswap | [] | 2020-08-21 | | | |
| | | BADCALL | [] | apk.badcall | [u'Lazarus Group'] | 2019-09-09 | | | |
| | | BADCALL | [] | win.badcall | [u'Lazarus Group'] | 2020-03-11 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | [u'Leviathan'] | 2019-03-25 | | | |
| | | BadNews | [] | win.badnews | [u'Dropping Elephant'] | 2020-07-24 | | | |
| | | BadPatch | [u'WelcomeChat'] | apk.badpatch | [u'Molerats'] | 2020-07-15 | | | |
| | | Bagle | [] | win.bagle | [] | 2018-07-24 | | | |
| | | Bahamut | [] | apk.bahamut | [u'Bahamut', u'Dropping Elephant'] | 2020-10-08 | | | |
| | | Bahamut | [] | win.bahamut | [] | 2020-10-08 | | | |
| | | Baldr | [u'Baldir'] | win.baldr | [] | 2019-08-07 | | | |
| | | BalkanDoor | [] | win.balkan_door | [] | 2019-09-03 | | | |
| | | BalkanRAT | [] | win.balkan_rat | [] | 2019-09-09 | | | |
| | | Bamital | [] | win.bamital | [] | 2019-10-21 | | | |
| | | Banatrix | [] | win.banatrix | [] | 2017-05-22 | | | |
| | | Bandook | [u'Bandok'] | win.bandook | [u'Dark Caracal'] | 2020-12-11 | | | |
| | | bangat | [] | win.bangat | [u'Comment Crew'] | 2018-09-11 | | | |
| | | Banjori | [u'MultiBanker 2', u'BankPatch', u'BackPatcher'] | win.banjori | [] | 2018-07-31 | | | |
| | | Bankshot | [u'COPPERHEDGE'] | win.bankshot | [u'Lazarus Group'] | 2020-09-01 | | | |
| | | Banload | [] | jar.banload | [] | 2019-04-27 | | | |
| | | Bart | [] | win.bart | [] | 2020-08-28 | | | |
| | | Basbanke | [] | apk.basbanke | [] | 2020-08-18 | | | |
| | | Bashlite | [u'gayfgt', u'Gafgyt', u'qbot', u'torlus', u'lizkebab'] | elf.bashlite | [] | 2020-12-09 | | | |
| | | BatchWiper | [] | win.batchwiper | [] | 2018-06-28 | | | |
| | | Batel | [] | win.batel | [] | 2020-04-21 | | | |
| | | Bateleur | [] | js.bateleur | [u'Anunak'] | 2020-06-25 | | | |
| | | BazarBackdoor | [u'BEERBOT', u'KEGTAP', u'Team9Backdoor'] | win.bazarbackdoor | [] | 2021-01-10 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2020-06-05 | | | |
| | | BBtok | [] | win.bbtok | [] | 2020-11-25 | | | |
| | | BCMPUPnP_Hunter | [] | elf.bcmpupnp_hunter | [] | 2018-11-19 | | | |
| | | Beapy | [] | win.beapy | [] | 2019-04-29 | | | |
| | | Bedep | [] | win.bedep | [] | 2016-04-26 | | | |
| | | beendoor | [] | win.beendoor | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | BeepService | [] | win.beepservice | [] | 2020-05-27 | | | |
| | | Bella | [] | osx.bella | [] | 2020-09-15 | | | |
| | | BELLHOP | [] | js.bellhop | [u'Anunak'] | 2020-06-25 | | | |
| | | Belonard | [] | win.belonard | [] | 2019-03-12 | | | |
| | | Berbomthum | [] | win.berbomthum | [] | 2018-12-19 | | | |
| | | BernhardPOS | [] | win.bernhardpos | [] | 2019-03-05 | | | |
| | | BestKorea | [] | win.bestkorea | [] | 2020-03-13 | | | |
| | | BetaBot | [u'Neurevt'] | win.betabot | [] | 2020-07-15 | | | |
| | | Bezigate | [] | win.bezigate | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | BfBot | [] | win.bfbot | [] | 2017-04-29 | | | |
| | | BianLian | [] | apk.bianlian | [] | 2019-07-08 | | | |
| | | BigViktor | [] | elf.bigviktor | [] | 2020-07-15 | | | |
| | | BillGates | [] | win.billgates | [] | 2020-01-12 | | | |
| | | Binanen | [] | win.binanen | [] | 2020-05-23 | | | |
| | | BioData | [] | win.biodata | [] | 2019-01-15 | | | |
| | | Biscuit | [u'zxdosml'] | win.biscuit | [u'Comment Crew'] | 2018-02-10 | | | |
| | | BISTROMATH | [] | win.bistromath | [u'Lazarus Group'] | 2020-02-27 | | | |
| | | BitPyLock | [] | win.bitpylock | [] | 2020-01-22 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2020-09-05 | | | |
| | | Bitsran | [u'SHADYCAT'] | win.bitsran | [u'Lazarus Group'] | 2019-08-26 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2020-06-21 | | | |
| | | BI_D Ransomware | [] | win.bid_ransomware | [] | 2019-08-12 | | | |
| | | BKA Trojaner | [u'bwin3_bka'] | win.bka_trojaner | [] | 2018-05-28 | | | |
| | | BLACKCOFFEE | [u'PNGRAT', u'gresim', u'ZoxPNG'] | win.blackcoffee | [u'APT41', u'Aurora Panda', u'Leviathan'] | 2020-05-23 | | | |
| | | BlackEnergy | [] | win.blackenergy | [u'Sandworm'] | 2021-01-05 | | | |
| | | BlackKingdom Ransomware | [] | win.blackkingdom_ransomware | [] | 2020-06-16 | | | |
| | | BlackNET RAT | [] | win.blacknet_rat | [] | 2020-12-26 | | | |
| | | BlackNix RAT | [] | win.blacknix_rat | [] | 2020-06-12 | | | |
| | | BlackPOS | [u'Kaptoxa', u'MMon', u'POSWDS', u'Reedum'] | win.blackpos | [] | 2020-10-05 | | | |
| | | BlackRemote | [u'BlackRAT'] | win.blackremote | [] | 2020-05-18 | | | |
| | | BlackRevolution | [] | win.blackrevolution | [] | 2016-05-31 | | | |
| | | BlackRock | [] | apk.blackrock | [] | 2020-09-25 | | | |
| | | Blackrota | [] | elf.blackrota | [] | 2020-12-26 | | | |
| | | BlackRouter | [u'BLACKHEART'] | win.blackrouter | [] | 2019-01-23 | | | |
| | | Blackruby Ransomware | [] | win.blackruby | [] | 2019-08-14 | | | |
| | | BlackShades | [] | win.blackshades | [] | 2020-05-23 | | | |
| | | BlackSoul | [] | win.blacksoul | [] | 2021-01-10 | | | |
| | | Blackworm RAT | [] | win.blackworm_rat | [] | 2019-08-28 | | | |
| | | BLINDINGCAN | [u'DRATzarus RAT'] | win.blindingcan | [u'Lazarus Group'] | 2020-12-16 | | | |
| | | BLINDTOAD | [] | win.blindtoad | [u'Lazarus Group'] | 2019-10-09 | | | |
| | | Blue Banana RAT | [] | jar.bluebanana | [] | 2020-10-13 | | | |
| | | BLUETHER | [u'CAPGELD'] | win.bluether | [u'BlackTech'] | 2020-01-20 | | | |
| | | Boaxxe | [] | win.boaxxe | [] | 2018-03-26 | | | |
| | | Bohmini | [] | win.bohmini | [] | 2018-07-24 | | | |
| | | Bolek | [u'KBOT'] | win.bolek | [] | 2020-04-06 | | | |
| | | BONDUPDATER | [u'Poison Frog', u'Glimpse'] | ps1.bondupdater | [u'OilRig', u'APT34'] | 2020-05-23 | | | |
| | | BOOSTWRITE | [] | win.boostwrite | [u'Anunak'] | 2020-02-27 | | | |
| | | BOOTWRECK | [u'MBRkiller'] | win.bootwreck | [u'Lazarus Group'] | 2019-10-12 | | | |
| | | Borr | [] | win.borr | [] | 2020-02-13 | | | |
| | | Bouncer | [] | win.bouncer | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Bozok | [] | win.bozok | [u'Operation C-Major', u'Temper Panda'] | 2019-04-11 | | | |
| | | BRAIN | [] | win.brain | [] | 2019-03-07 | | | |
| | | Brambul | [u'SORRYBRUTE'] | win.brambul | [u'Lazarus Group'] | 2020-05-23 | | | |
| | | BRATA | [] | apk.brata | [] | 2019-09-06 | | | |
| | | BravoNC | [] | win.bravonc | [u'Lazarus Group'] | 2017-05-23 | | | |
| | | BreachRAT | [] | win.breach_rat | [u'Operation C-Major'] | 2019-04-08 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2018-02-13 | | | |
| | | BrickerBot | [] | py.brickerbot | [] | 2018-01-12 | | | |
| | | BROLER | [u'down_new'] | win.broler | [u'Tick'] | 2020-06-02 | | | |
| | | BrushaLoader | [] | win.brushaloader | [] | 2019-11-20 | | | |
| | | BrutPOS | [] | win.brutpos | [] | 2018-04-23 | | | |
| | | BS2005 | [] | win.bs2005 | [u'Mirage'] | 2020-05-23 | | | |
| | | BTCWare | [] | win.btcware | [] | 2017-09-14 | | | |
| | | BUBBLEWRAP | [] | win.bubblewrap | [u'Temper Panda'] | 2019-04-12 | | | |
| | | Buer | [u'Buerloader'] | win.buer | [] | 2020-12-08 | | | |
| | | BUFFETLINE | [] | win.buffetline | [u'Lazarus Group'] | 2020-02-27 | | | |
| | | Buhtrap | [u'Ratopak'] | win.buhtrap | [u'BuhTrap'] | 2020-11-23 | | | |
| | | Bundestrojaner | [u'R2D2', u'0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | Bundlore | [u'SurfBuyer'] | osx.bundlore | [] | 2020-11-09 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2019-04-16 | | | |
| | | BusyGasper | [] | apk.busygasper | [] | 2018-11-16 | | | |
| | | Buterat | [u'spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | Buzus | [u'Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | BYEBY | [] | win.byeby | [u'Calypso group', u'Karma Panda'] | 2020-05-14 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | c99shell | [u'c99'] | php.c99 | [] | 2020-01-13 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | CACTUSTORCH | [] | js.cactustorch | [u'APT32', u'Leviathan'] | 2020-09-25 | | | |
| | | CadelSpy | [u'Cadelle'] | win.cadelspy | [] | 2020-04-21 | | | |
| | | CamuBot | [] | win.camubot | [] | 2018-09-07 | | | |
| | | Cannibal Rat | [] | win.cannibal_rat | [] | 2018-03-17 | | | |
| | | Cannon | [] | win.cannon | [u'Sofacy'] | 2019-01-06 | | | |
| | | Carbanak | [u'Anunak'] | win.carbanak | [u'Anunak'] | 2021-01-01 | | | |
| | | Carberp | [] | win.carberp | [] | 2020-02-27 | | | |
| | | CarbonSteal | [] | apk.carbonsteal | [u'HenBox'] | 2020-07-15 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2020-06-29 | | | |
| | | Careto | [u'Mask', u'Appetite'] | osx.careto | [] | 2017-08-22 | | | |
| | | CARROTBALL | [] | win.carrotball | [] | 2020-02-04 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2020-01-26 | | | |
| | | CASHY200 | [] | ps1.cashy200 | [] | 2020-11-11 | | | |
| | | Casper | [] | win.casper | [u'SNOWGLOBE'] | 2018-01-17 | | | |
| | | Casso | [] | osx.casso | [u'Lazarus Group'] | 2020-07-30 | | | |
| | | Catchamas | [] | win.catchamas | [u'Thrip'] | 2018-06-25 | | | |
| | | Catelites | [] | apk.catelites | [] | 2017-12-30 | | | |
| | | CCleaner Backdoor | [u'DIRTCLEANER'] | win.ccleaner_backdoor | [] | 2020-10-08 | | | |
| | | CDorked | [u'CDorked.A'] | elf.cdorked | [] | 2018-07-23 | | | |
| | | CDRThief | [] | elf.cdrthief | [] | 2020-09-15 | | | |
| | | CenterPOS | [u'cerebrus'] | win.centerpos | [] | 2018-04-23 | | | |
| | | Cephei | [] | elf.cephei | [] | 2021-01-11 | | | |
| | | Cerber | [] | win.cerber | [] | 2020-12-11 | | | |
| | | Cerberus | [] | apk.cerberus | [] | 2020-11-19 | | | |
| | | Cerbu | [] | win.cerbu_miner | [] | 2018-10-18 | | | |
| | | Cetus | [] | elf.cetus | [] | 2020-08-31 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2019-10-04 | | | |
| | | Chamois | [] | apk.chamois | [] | 2019-09-24 | | | |
| | | Chaperone | [u'Taj Mahal'] | win.chaperone | [] | 2020-08-13 | | | |
| | | Chapro | [] | elf.chapro | [] | 2018-06-28 | | | |
| | | Charger | [] | apk.charger | [] | 2019-03-07 | | | |
| | | CHCH Ransomware | [] | win.chch | [] | 2019-12-18 | | | |
| | | ChChes | [u'HAYMAKER', u'Ham Backdoor'] | win.chches | [u'Stone Panda'] | 2020-05-23 | | | |
| | | CHEESETRAY | [u'CROWDEDFLOUNDER'] | win.cheesetray | [u'Lazarus Group'] | 2020-02-27 | | | |
| | | Chernolocker | [] | win.chernolocker | [] | 2020-01-26 | | | |
| | | CherryPicker POS | [u'cherrypickerpos', u'cherrypicker', u'cherry_picker'] | win.cherry_picker | [] | 2018-02-10 | | | |
| | | ChewBacca | [] | win.chewbacca | [] | 2018-04-26 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | [u'APT41', u'Emissary Panda', u'GALLIUM', u'Hurricane Panda', u'Leviathan'] | 2020-12-01 | | | |
| | | Chinad | [] | win.chinad | [] | 2018-06-19 | | | |
| | | ChinaJm Ransomware | [] | win.chinajm | [] | 2020-08-05 | | | |
| | | Chinoxy | [] | win.chinoxy | [] | 2021-01-05 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | Chrysaor | [u'Pegasus', u'JigglyPuff'] | apk.chrysaor | [] | 2020-02-27 | | | |
| | | Chthonic | [u'AndroKINS'] | win.chthonic | [] | 2020-02-01 | | | |
| | | Cinobi | [] | win.cinobi | [] | 2020-03-11 | | | |
| | | Citadel | [] | win.citadel | [] | 2017-12-23 | | | |
| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | CLEANTOAD | [] | win.cleantoad | [u'Lazarus Group'] | 2019-11-13 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clientor | [] | apk.clientor | [] | 2018-09-19 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2020-09-02 | | | |
| | | Clipper | [] | apk.clipper | [] | 2019-02-13 | | | |
| | | Clop | [] | win.clop | [u'TA505'] | 2021-01-14 | | | |
| | | Cloud Duke | [] | win.cloud_duke | [u'APT 29'] | 2017-05-21 | | | |
| | | Cloud Snooper | [u'Snoopy'] | elf.cloud_snooper | [] | 2020-12-26 | | | |
| | | CloudAtlas | [] | apk.cloudatlas | [u'Inception Framework'] | 2020-05-18 | | | |
| | | CloudEyE | [u'GuLoader', u'vbdropper'] | win.cloudeye | [] | 2021-01-10 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | [u'meciv'] | win.cmstar | [] | 2017-11-16 | | | |
| | | CoalaBot | [] | win.coalabot | [] | 2018-12-19 | | | |
| | | Cobalt Strike | [u'Agentemis', u'BEACON', u'CobaltStrike'] | win.cobalt_strike | [u'APT 29', u'APT32', u'APT41', u'Anunak', u'Cobalt', u'Codoso', u'CopyKittens', u'DarkHydrus', u'FIN6', u'Leviathan', u'Shell Crew', u'Stone Panda', u'Winnti Umbrella'] | 2021-01-11 | | | |
| | | Cobian RAT | [] | win.cobian_rat | [] | 2020-07-01 | | | |
| | | CobInt | [u'COOLPANTS'] | win.cobint | [u'Cobalt'] | 2020-07-24 | | | |
| | | Cobra Carbon System | [u'Carbon'] | win.cobra | [u'Turla Group'] | 2020-10-29 | | | |
| | | CockBlocker | [] | win.cockblocker | [] | 2017-01-10 | | | |
| | | CodeKey | [] | win.codekey | [] | 2017-02-20 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2018-04-23 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2019-12-18 | | | |
| | | CoinThief | [] | osx.cointhief | [] | 2019-09-12 | | | |
| | | Cold$eal | [u'ColdSeal'] | win.coldseal | [] | 2020-11-26 | | | |
| | | ColdLock | [] | win.coldlock | [u'APT41'] | 2020-09-23 | | | |
| | | Coldroot RAT | [] | osx.coldroot_rat | [] | 2019-07-11 | | | |
| | | CollectorGoomba | [] | win.collectorgoomba | [] | 2020-07-02 | | | |
| | | Colony | [u'Bandios', u'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combojack | [] | win.combojack | [] | 2018-03-12 | | | |
| | | Combos | [] | win.combos | [u'Comment Crew'] | 2018-02-10 | | | |
| | | CometBot | [] | apk.comet_bot | [] | 2019-03-07 | | | |
| | | ComodoSec | [] | win.comodosec | [] | 2017-01-10 | | | |
| | | COMpfun | [u'Reductor RAT'] | win.compfun | [] | 2020-08-13 | | | |
| | | Computrace | [u'lojack'] | win.computrace | [u'Sofacy'] | 2020-05-23 | | | |
| | | ComradeCircle | [] | win.comrade_circle | [] | 2017-02-15 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | [u'traffic converter', u'downadup', u'Kido'] | win.conficker | [] | 2019-04-24 | | | |
| | | Confucius | [] | win.confucius | [] | 2021-01-13 | | | |
| | | Connic | [u'SpyBanker'] | apk.connic | [] | 2017-12-14 | | | |
| | | Conti Ransomware | [] | win.conti | [] | 2020-12-23 | | | |
| | | Contopee | [u'WHITEOUT'] | win.contopee | [u'Lazarus Group'] | 2020-04-21 | | | |
| | | CookieBag | [] | win.cookiebag | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Corebot | [] | win.corebot | [] | 2018-01-04 | | | |
| | | CoreDN | [] | win.coredn | [] | 2020-10-28 | | | |
| | | Coreshell | [u'SOURFACE'] | win.coreshell | [u'Sofacy'] | 2020-08-30 | | | |
| | | Corona DDOS Bot | [] | elf.corona | [] | 2019-11-04 | | | |
| | | Coronavirus Android Worm | [] | apk.corona_worm | [] | 2020-03-27 | | | |
| | | CoronaVirus Ransomware | [u'CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | Cotx RAT | [] | win.cotx | [u'TA428'] | 2020-12-23 | | | |
| | | Covicli | [u'Covically'] | win.covicli | [u'MuddyWater'] | 2020-10-21 | | | |
| | | CoViper | [] | win.coviper | [] | 2020-04-21 | | | |
| | | CpuMeaner | [] | osx.cpumeaner | [] | 2017-12-15 | | | |
| | | Cpuminer | [] | apk.cpuminer | [] | 2017-11-08 | | | |
| | | Cpuminer | [] | elf.cpuminer | [] | 2017-11-27 | | | |
| | | Cr1ptT0r | [u'CriptTor'] | elf.cr1ptt0r | [] | 2019-03-20 | | | |
| | | crackshot | [] | win.crackshot | [u'APT41'] | 2019-08-13 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CRAT | [] | win.crat | [u'Lazarus Group'] | 2020-12-26 | | | |
| | | CREAMSICLE | [] | win.creamsicle | [u'APT 30'] | 2019-04-17 | | | |
| | | CreativeUpdater | [] | osx.creative_updater | [] | 2018-02-07 | | | |
| | | Credraptor | [] | win.credraptor | [] | 2016-12-27 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |
| | | Crimson RAT | [u'SEEDOOR', u'Scarimson'] | win.crimson | [u'Operation C-Major'] | 2020-11-04 | | | |
| | | Crisis | [] | osx.crisis | [] | 2018-06-28 | | | |
| | | CrossRAT | [u'Trupto'] | jar.crossrat | [u'Dark Caracal'] | 2020-06-08 | | | |
| | | Crossrider | [] | osx.crossrider | [] | 2018-05-11 | | | |
| | | CROSSWALK | [u'ProxIP', u'Motnug'] | win.crosswalk | [u'APT41'] | 2020-11-23 | | | |
| | | Crutch | [] | win.crutch | [u'Turla Group'] | 2020-12-08 | | | |
| | | Cryakl | [u'CryLock'] | win.cryakl | [] | 2020-09-15 | | | |
| | | CryCryptor | [u'CryCrypter', u'CryDroid'] | apk.crycryptor | [] | 2020-06-24 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2020-04-02 | | | |
| | | CrypticConvo | [] | win.cryptic_convo | [u'Scarlet Mimic'] | 2020-01-26 | | | |
| | | CryptoDarkRubix | [u'Ranet'] | win.cryptodarkrubix | [] | 2020-07-30 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2018-02-10 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2020-09-15 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |
| | | CryptoMix | [u'CryptFile2'] | win.cryptomix | [] | 2020-03-04 | | | |
| | | CryptoNight | [] | js.cryptonight | [] | 2018-04-24 | | | |
| | | CryptoPatronum | [] | win.cryptopatronum | [] | 2020-02-03 | | | |
| | | CryptoRansomeware | [] | win.crypto_ransomeware | [] | 2017-02-15 | | | |
| | | Cryptorium | [] | win.cryptorium | [] | | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2020-12-03 | | | |
| | | CryptoWire | [] | win.cryptowire | [] | 2018-06-13 | | | |
| | | CryptXXXX | [] | win.cryptxxxx | [] | 2020-12-20 | | | |
| | | CsExt | [] | win.csext | [u'Cleaver'] | 2017-05-21 | | | |
| | | CTB Locker | [] | win.ctb_locker | [] | 2020-07-30 | | | |
| | | Cuba Ransomware | [] | win.cuba | [] | 2020-06-11 | | | |
| | | Cuegoe | [] | win.cuegoe | [u'APT32'] | 2017-05-19 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | CukieGrab | [u'Roblox Trade Assist'] | js.cukiegrab_crx | [] | 2017-09-14 | | | |
| | | Cursed Murderer Ransomware | [] | win.cursed_murderer | [] | 2020-02-10 | | | |
| | | Cutlet | [] | win.cutlet | [] | 2019-06-23 | | | |
| | | Cutwail | [] | win.cutwail | [u'NARWHAL SPIDER'] | 2020-09-15 | | | |
| | | CyberGate | [u'Rebhip'] | win.cybergate | [] | 2020-07-15 | | | |
| | | CyberSplitter | [] | win.cyber_splitter | [] | 2016-12-27 | | | |
| | | CycBot | [] | win.cycbot | [] | 2018-01-19 | | | |
| | | Cyrat Ransomware | [] | win.cyrat | [] | 2020-09-01 | | | |
| | | Dacls | [] | elf.dacls | [] | 2020-12-26 | | | |
| | | Dacls | [] | osx.dacls | [u'Lazarus Group'] | 2021-01-11 | | | |
| | | Dacls | [] | win.dacls | [u'Lazarus Group'] | 2020-07-30 | | | |
| | | DADJOKE | [] | win.dadjoke | [u'Leviathan'] | 2020-02-09 | | | |
| | | DADSTACHE | [] | win.dadstache | [u'Leviathan'] | 2020-07-11 | | | |
| | | Dairy | [] | win.dairy | [u'Comment Crew'] | 2018-02-10 | | | |
| | | DanaBot | [] | win.danabot | [u'SCULLY SPIDER'] | 2020-07-30 | | | |
| | | danbot | [] | win.danbot | [] | 2020-05-23 | | | |
| | | Dark Nexus | [] | elf.darknexus | [] | 2020-06-11 | | | |
| | | Dark Shades | [u'Rogue'] | apk.darkshades | [] | 2020-05-05 | | | |
| | | DarkComet | [u'Breut', u'Fynloski', u'klovbot'] | win.darkcomet | [u'APT33', u'Lazarus Group', u'Operation C-Major'] | 2020-09-15 | | | |
| | | DarkHotel | [] | win.dubnium_darkhotel | [u'DarkHotel'] | 2020-03-26 | | | |
| | | DarkMegi | [] | win.darkmegi | [] | 2018-06-28 | | | |
| | | Darkmoon | [u'Chymine'] | win.darkmoon | [] | 2018-06-28 | | | |
| | | DarkPulsar | [] | win.darkpulsar | [u'Equation Group'] | 2017-05-01 | | | |
| | | DarkRat | [] | win.darkrat | [] | 2019-10-11 | | | |
| | | DarkShell | [] | win.darkshell | [] | 2018-01-02 | | | |
| | | DarkSide | [] | win.darkside | [] | 2020-12-17 | | | |
| | | Darksky | [] | win.darksky | [] | 2018-03-27 | | | |
| | | DarkStRat | [] | win.darkstrat | [] | 2018-09-11 | | | |
| | | DarkTequila | [] | win.darktequila | [] | 2018-08-31 | | | |
| | | Darktrack RAT | [] | win.darktrack_rat | [] | 2020-09-24 | | | |
| | | DarthMiner | [] | osx.darthminer | [] | 2018-12-19 | | | |
| | | Daserf | [u'Muirim', u'Nioupale'] | win.daserf | [u'Tick'] | 2020-05-23 | | | |
| | | Datper | [] | win.datper | [u'Tick'] | 2021-01-01 | | | |
| | | DBatLoader | [u'ModiLoader', u'NatsoLoader'] | win.dbatloader | [] | 2020-09-25 | | | |
| | | DCRat | [u'DarkCrystal RAT'] | win.dcrat | [] | 2020-05-18 | | | |
| | | DDKeylogger | [] | win.ddkeylogger | [] | 2020-05-27 | | | |
| | | DDKONG | [] | win.ddkong | [u'RANCOR'] | 2020-05-23 | | | |
| | | ddoor | [] | elf.ddoor | [] | 2020-03-13 | | | |
| | | DeathRansom | [u'deathransom', u'wacatac'] | win.deathransom | [] | 2020-03-27 | | | |
| | | Decebal | [] | win.decebal | [] | 2018-04-26 | | | |
| | | DEFENSOR ID | [u'Defensor Digital'] | apk.defensor_id | [] | 2020-07-30 | | | |
| | | Defray | [u'Glushkov'] | win.defray | [] | 2020-11-23 | | | |
| | | Delta(Alfa,Bravo, ...) | [] | win.deltas | [u'Lazarus Group'] | 2017-07-12 | | | |
| | | Dendroid | [] | apk.dendroid | [] | 2020-05-20 | | | |
| | | Dented | [] | win.dented | [] | 2017-11-16 | | | |
| | | DeputyDog | [] | win.deputydog | [u'Aurora Panda'] | 2020-06-08 | | | |
| | | DeriaLock | [] | win.deria_lock | [] | | | | |
| | | Derusbi | [u'PHOTO'] | win.derusbi | [u'APT41', u'Axiom', u'Leviathan', u'Stone Panda'] | 2021-01-01 | | | |
| | | Devil's Rat | [] | win.devils_rat | [] | 2017-09-18 | | | |
| | | Dexbia | [u'CONIME'] | win.dexbia | [u'Tonto Team'] | 2020-10-06 | | | |
| | | Dexphot | [] | win.dexphot | [] | 2019-12-04 | | | |
| | | Dexter | [u'LusyPOS'] | win.dexter | [] | 2018-01-25 | | | |
| | | Dharma | [u'Arena', u'Crysis', u'Wadhrama', u'ncov'] | win.dharma | [] | 2020-12-26 | | | |
| | | DiamondFox | [u'Crystal', u'Gorynych', u'Gorynch'] | win.diamondfox | [] | 2020-08-12 | | | |
| | | DILLJUICE | [] | win.dilljuice | [u'Stone Panda'] | 2019-06-23 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | [u'Shamoon'] | win.disttrack | [u'Shamoon', u'Magic Hound', u'Timberworm', u'COBALT GIPSY'] | 2020-06-03 | | | |
| | | Divergent | [u'Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2019-04-02 | | | |
| | | dmsSpy | [] | apk.dmsspy | [] | 2020-03-27 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSMessenger | [u'TEXTMATE'] | win.dnsmessenger | [u'Anunak'] | 2020-06-25 | | | |
| | | DNSpionage | [u'Agent Drable', u'AgentDrable', u'Webmask'] | win.dnspionage | [u'DNSpionage'] | 2020-05-25 | | | |
| | | DNSRat | [u'DNSbot'] | js.dnsrat | [u'Anunak'] | 2020-02-27 | | | |
| | | Dockster | [] | osx.dockster | [] | 2018-06-28 | | | |
| | | DogHousePower | [u'Shelma'] | win.doghousepower | [] | 2018-01-03 | | | |
| | | Dok | [u'Retefe'] | osx.retefe | [] | 2019-05-02 | | | |
| | | Doki | [] | elf.doki | [] | 2020-12-26 | | | |
| | | DoppelPaymer | [] | win.doppelpaymer | [u'DOPPEL SPIDER'] | 2021-01-11 | | | |
| | | Dorshel | [] | win.dorshel | [u'Energetic Bear'] | 2020-04-21 | | | |
| | | Dot Ransomware | [u'MZP Ransomware'] | win.dot_ransomware | [] | 2020-03-27 | | | |
| | | DoubleAgent | [] | apk.doubleagent | [u'HenBox'] | 2020-07-15 | | | |
| | | DoubleFantasy | [] | elf.doublefantasy | [u'Equation Group'] | 2020-10-05 | | | |
| | | DoubleFantasy | [u'VALIDATOR'] | win.doublefantasy | [u'Equation Group'] | 2020-10-04 | | | |
| | | DoubleLocker | [] | apk.doublelocker | [] | 2017-10-20 | | | |
| | | DoublePulsar | [] | win.doublepulsar | [u'Equation Group', u'UPS'] | 2019-05-07 | | | |
| | | Downdelph | [u'DELPHACY'] | win.downdelph | [u'Sofacy'] | 2020-06-03 | | | |
| | | Downeks | [] | win.downeks | [] | 2020-03-03 | | | |
| | | DownPaper | [] | win.downpaper | [u'Charming Kitten'] | 2019-09-19 | | | |
| | | Downrage | [u'GAMEFISH'] | win.downrage | [u'Sofacy'] | 2019-06-09 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DRATzarus | [] | win.dratzarus | [u'Lazarus Group'] | 2020-08-17 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2020-09-04 | | | |
| | | Dridex | [] | win.dridex | [u'TA505', u'INDRIK SPIDER'] | 2021-01-05 | | | |
| | | DRIFTPIN | [u'Toshliph', u'Spy.Agent.ORM'] | win.driftpin | [u'Anunak'] | 2020-06-25 | | | |
| | | Dripion | [u'Masson'] | win.dripion | [] | 2019-09-06 | | | |
| | | DriveOcean | [u'Google Drive RAT'] | win.driveocean | [u'Sofacy'] | 2021-01-11 | | | |
| | | DropBook | [] | win.dropbook | [u'Molerats'] | 2020-12-15 | | | |
| | | DropboxC2C | [] | py.dropboxc2c | [] | 2020-03-06 | | | |
| | | DROPSHOT | [] | win.dropshot | [u'APT33'] | 2018-06-25 | | | |
| | | Dtrack | [] | win.dtrack | [u'Lazarus Group'] | 2020-12-08 | | | |
| | | DualToy | [] | apk.dualtoy | [] | 2017-02-15 | | | |
| | | DualToy | [] | ios.dualtoy | [] | 2017-02-15 | | | |
| | | DualToy | [] | win.dualtoy | [] | 2018-01-22 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | Dumador | [] | win.dumador | [] | 2018-07-24 | | | |
| | | Dummy | [] | osx.dummy | [] | 2018-07-06 | | | |
| | | DuQu | [] | win.duqu | [u'Unit 8200'] | 2020-05-07 | | | |
| | | DUSTMAN | [] | win.dustman | [] | 2020-01-21 | | | |
| | | Duuzer | [u'Escad'] | win.duuzer | [u'Lazarus Group'] | 2020-12-08 | | | |
| | | Dvmap | [] | apk.dvmap | [] | 2020-02-26 | | | |
| | | DYEPACK | [u'swift'] | win.dyepack | [u'Lazarus Group'] | 2020-03-11 | | | |
| | | Dyre | [u'Dyreza'] | win.dyre | [u'WIZARD SPIDER'] | 2020-10-27 | | | |
| | | EASYNIGHT | [] | win.easynight | [u'APT41'] | 2019-10-18 | | | |
| | | Ebury | [] | elf.ebury | [] | 2019-06-08 | | | |
| | | Echobot | [] | elf.echobot | [] | 2020-03-09 | | | |
| | | EDA2 | [] | win.eda2_ransom | [] | 2020-04-14 | | | |
| | | Egregor | [] | win.egregor | [] | 2021-01-11 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2017-09-14 | | | |
| | | Eleanor | [] | osx.eleanor | [] | 2019-09-10 | | | |
| | | ELECTRICFISH | [] | win.electricfish | [u'Lazarus Group'] | 2020-03-11 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | ElectroRAT | [] | osx.electro_rat | [] | 2021-01-11 | | | |
| | | elf.vpnfilter | [] | elf.vpnfilter | [] | 2020-10-23 | | | |
| | | elf.wellmess | [] | elf.wellmess | [u'APT 29'] | 2021-01-05 | | | |
| | | Elirks | [] | win.elirks | [] | 2018-04-13 | | | |
| | | Elise | [u'EVILNEST'] | win.elise | [u'Lotus Blossom'] | 2020-07-13 | | | |
| | | ELMER | [u'Elmost'] | win.elmer | [u'Danti', u'APT 16'] | 2019-04-12 | | | |
| | | Emdivi | [] | win.emdivi | [u'Stone Panda'] | 2020-05-13 | | | |
| | | Emotet | [u'Geodo', u'Heodo'] | win.emotet | [u'MUMMY SPIDER', u'Mealybug'] | 2021-01-10 | | | |
| | | Empire Downloader | [] | win.empire_downloader | [] | 2021-01-11 | | | |
| | | Emudbot | [] | win.emudbot | [] | 2020-08-13 | | | |
| | | Enfal | [u'Lurid'] | win.enfal | [] | 2020-05-23 | | | |
| | | Enrume | [u'Ransom32'] | js.enrume | [] | 2020-03-06 | | | |
| | | Ensikology | [u'Ensiko'] | php.ensikology | [] | 2020-07-30 | | | |
| | | Enviserv | [] | win.enviserv | [] | 2020-07-03 | | | |
| | | EquationDrug | [] | win.equationdrug | [u'Equation Group'] | 2019-06-23 | | | |
| | | Equationgroup (Sorting) | [] | win.equationgroup | [] | 2017-09-26 | | | |
| | | Erebus | [] | elf.erebus | [] | 2018-02-21 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | Eredel | [] | win.eredel | [] | 2018-09-21 | | | |
| | | Erica Ransomware | [] | win.erica_ransomware | [] | 2020-04-01 | | | |
| | | Eris Ransomware | [] | win.eris | [] | 2019-10-10 | | | |
| | | EternalPetya | [u'ExPetr', u'Pnyetya', u'Petna', u'NotPetya', u'Nyetya', u'NonPetya', u'nPetya', u'Diskcoder.C', u'BadRabbit'] | win.eternal_petya | [u'TeleBots', u'Sandworm'] | 2021-01-05 | | | |
| | | EternalRocks | [u'MicroBotMassiveNet'] | win.eternalrocks | [] | 2020-03-09 | | | |
| | | EtumBot | [u'HighTide'] | win.etumbot | [u'IXESHE'] | 2020-05-23 | | | |
| | | Eventbot | [] | apk.eventbot | [] | 2020-07-16 | | | |
| | | Evilbunny | [] | win.evilbunny | [u'SNOWGLOBE'] | 2020-06-08 | | | |
| | | EvilGnome | [] | elf.evilgnome | [u'Gamaredon Group'] | 2020-06-16 | | | |
| | | EvilGrab | [u'Vidgrab'] | win.evilgrab | [u'Stone Panda'] | 2020-05-18 | | | |
| | | EVILNUM | [] | js.evilnum | [] | 2020-11-04 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2020-07-11 | | | |
| | | EvilOSX | [] | osx.evilosx | [] | 2018-02-26 | | | |
| | | EvilPony | [u'CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | EvilQuest | [u'ThiefQuest'] | osx.evilquest | [] | 2021-01-11 | | | |
| | | Evrial | [] | win.evrial | [] | 2018-02-01 | | | |
| | | Exaramel | [] | elf.exaramel | [u'TeleBots'] | 2020-06-10 | | | |
| | | Exaramel | [] | win.exaramel | [u'TeleBots'] | 2020-06-10 | | | |
| | | Excalibur | [u'Sabresac', u'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Exile RAT | [] | win.exilerat | [u'TA413'] | 2020-09-16 | | | |
| | | ExoBot | [] | apk.exobot | [] | 2018-09-13 | | | |
| | | Exodus | [] | apk.exodus | [] | 2020-02-27 | | | |
| | | Exorcist Ransomware | [] | win.exorcist | [] | 2020-07-30 | | | |
| | | ext4 | [] | elf.ext4 | [] | 2018-08-23 | | | |
| | | Eye Pyramid | [] | win.eye_pyramid | [] | 2017-02-15 | | | |
| | | EYService | [] | win.eyservice | [u'Nazar'] | 2020-05-07 | | | |
| | | FailyTale | [] | osx.failytale | [] | 2019-04-04 | | | |
| | | Fake Pornhub | [] | apk.pornhub | [] | 2017-02-15 | | | |
| | | FakeGram | [u'FakeTGram'] | apk.faketgram | [] | 2018-11-19 | | | |
| | | FakeRean | [u'Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeSpy | [] | apk.fakespy | [] | 2020-06-25 | | | |
| | | FakeTC | [] | win.faketc | [u'Sandworm'] | 2020-02-25 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | Fanny | [u'DEMENTIAWHEEL'] | win.fanny | [u'Equation Group'] | 2020-10-04 | | | |
| | | FantomCrypt | [] | win.fantomcrypt | [] | 2018-01-11 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastCash | [] | aix.fastcash | [u'Lazarus Group'] | 2020-12-11 | | | |
| | | FastLoader | [] | win.fastloader | [] | 2020-01-14 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |
| | | FatDuke | [] | win.fatduke | [u'APT 29'] | 2020-05-23 | | | |
| | | FBot | [] | elf.fbot | [] | 2020-02-27 | | | |
| | | FCT Ransomware | [] | win.fct | [] | 2020-02-10 | | | |
| | | FEimea RAT | [] | jar.feimea_rat | [] | 2019-03-07 | | | |
| | | Felismus | [] | win.felismus | [u'Sowbug'] | 2017-11-21 | | | |
| | | Felixroot | [] | win.felixroot | [u'GreyEnergy'] | 2018-11-19 | | | |
| | | Feodo | [u'Cridex', u'Bugat'] | win.feodo | [] | 2020-11-02 | | | |
| | | Ficker Stealer | [] | win.fickerstealer | [] | 2020-12-03 | | | |
| | | FileCoder | [] | apk.filecoder | [] | 2019-07-31 | | | |
| | | Filecoder | [] | win.unidentified_030 | [] | 2017-07-11 | | | |
| | | FileIce | [] | win.fileice_ransom | [] | 2018-02-13 | | | |
| | | Filerase | [] | win.filerase | [u'APT33'] | 2020-04-21 | | | |
| | | Final1stSpy | [] | win.final1stspy | [u'APT37'] | 2018-10-23 | | | |
| | | FindPOS | [u'Poseidon'] | win.findpos | [] | 2018-03-01 | | | |
| | | FinFisher | [] | apk.finfisher | [] | 2020-10-15 | | | |
| | | FinFisher | [] | elf.finfisher | [] | 2020-10-15 | | | |
| | | FinFisher | [] | osx.finfisher | [] | 2021-01-11 | | | |
| | | FinFisher RAT | [u'FinSpy'] | win.finfisher | [] | 2020-10-15 | | | |
| | | Fireball | [] | win.fireball | [] | 2017-07-11 | | | |
| | | FireBird RAT | [] | win.firebird_rat | [] | 2020-03-13 | | | |
| | | FireCrypt | [] | win.firecrypt | [] | | | | |
| | | FireMalv | [] | win.firemalv | [u'Rocket Kitten'] | 2018-04-17 | | | |
| | | FirstRansom | [] | win.first_ransom | [] | 2017-02-15 | | | |
| | | Flame | [u'sKyWIper'] | win.flame | [] | 2020-05-07 | | | |
| | | FlashBack | [u'FakeFlash'] | osx.flashback | [] | 2019-10-23 | | | |
| | | FLASHFLOOD | [] | win.flashflood | [u'APT 30'] | 2019-04-17 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | [u'TA505'] | 2020-08-28 | | | |
| | | FlawedGrace | [u'GraceWire'] | win.flawedgrace | [u'TA505'] | 2020-08-28 | | | |
| | | FlexiSpy | [] | apk.flexispy | [] | 2017-05-01 | | | |
| | | FlexiSpy | [] | symbian.flexispy | [] | 2017-05-01 | | | |
| | | FlexiSpy | [] | win.flexispy | [] | 2017-05-01 | | | |
| | | FlexNet | [u'gugi'] | apk.flexnet | [] | 2020-02-26 | | | |
| | | FlokiBot | [] | win.floki_bot | [] | 2018-01-22 | | | |
| | | floodor | [] | elf.floodor | [] | 2019-08-12 | | | |
| | | FlowCloud | [] | win.flowcloud | [u'Stone Panda'] | 2021-01-05 | | | |
| | | FlowerPower | [] | ps1.flowerpower | [u'Kimsuky'] | 2020-12-03 | | | |
| | | FlowerShop | [] | win.flowershop | [] | 2020-05-07 | | | |
| | | Floxif | [] | win.floxif | [] | 2017-02-15 | | | |
| | | Flusihoc | [] | win.flusihoc | [] | 2017-10-09 | | | |
| | | FlyingDutchman | [] | win.flying_dutchman | [u'Calypso group'] | 2019-11-12 | | | |
| | | FlyStudio | [] | win.flystudio | [] | 2020-03-19 | | | |
| | | Fobber | [] | win.fobber | [] | 2017-08-01 | | | |
| | | FONIX | [] | win.fonix | [] | 2020-10-12 | | | |
| | | forbiks | [u'Forbix'] | vbs.forbiks | [] | 2019-09-03 | | | |
| | | Formbook | [] | win.formbook | [u'SWEED', u'Cobalt'] | 2020-12-08 | | | |
| | | FormerFirstRAT | [u'ffrat'] | win.former_first_rat | [u'DragonOK', u'Samurai Panda'] | 2019-10-17 | | | |
| | | FortuneCrypt | [] | win.fortunecrypt | [] | 2019-10-11 | | | |
| | | FRat | [] | win.frat | [] | 2020-06-12 | | | |
| | | FRat Loader | [] | ps1.frat_loader | [] | 2020-06-12 | | | |
| | | Freenki Loader | [] | win.freenki | [u'APT37'] | 2020-12-16 | | | |
| | | FriedEx | [u'BitPaymer', u'DoppelPaymer', u'IEncrypt'] | win.friedex | [u'INDRIK SPIDER'] | 2020-11-23 | | | |
| | | FritzFrog | [] | elf.fritzfrog | [] | 2020-12-26 | | | |
| | | FruitFly | [u'Quimitchin'] | osx.fruitfly | [] | 2020-05-02 | | | |
| | | FTCODE | [] | ps1.ftcode | [] | 2020-06-24 | | | |
| | | FunkyBot | [] | apk.funkybot | [] | 2020-06-25 | | | |
| | | FunnyDream | [] | win.funny_dream | [] | 2021-01-05 | | | |
| | | Furtim | [] | win.furtim | [] | 2017-02-15 | | | |
| | | FuxSocy | [] | win.fuxsocy | [] | 2019-11-15 | | | |
| | | Gacrux | [] | win.gacrux | [] | 2020-10-29 | | | |
| | | GalaxyLoader | [] | win.galaxyloader | [] | 2018-03-26 | | | |
| | | gamapos | [u'pios'] | win.gamapos | [] | 2018-04-25 | | | |
| | | Gameover DGA | [] | win.gameover_dga | [] | 2016-04-18 | | | |
| | | Gameover P2P | [u'GOZ', u'Mapp', u'ZeuS P2P'] | win.gameover_p2p | [] | 2020-11-02 | | | |
| | | Gamotrol | [] | win.gamotrol | [] | 2018-07-24 | | | |
| | | Gandcrab | [u'GrandCrab'] | win.gandcrab | [u'Pinchy Spider'] | 2020-11-26 | | | |
| | | Gaudox | [] | win.gaudox | [] | 2017-11-21 | | | |
| | | Gauss | [] | win.gauss | [] | 2018-07-10 | | | |
| | | Gazer | [u'WhiteBear'] | win.gazer | [u'Turla Group'] | 2020-12-08 | | | |
| | | gcman | [] | win.gcman | [] | 2018-09-11 | | | |
| | | GearInformer | [] | win.gearinformer | [] | 2017-11-21 | | | |
| | | GEARSHIFT | [] | win.gearshift | [u'APT41'] | 2019-08-13 | | | |
| | | GEMCUTTER | [] | win.gemcutter | [u'APT 30'] | 2019-04-17 | | | |
| | | Geost | [] | apk.geost | [] | 2020-12-08 | | | |
| | | Get2 | [u'FRIENDSPEAK', u'GetandGo'] | win.get2 | [u'TA505'] | 2021-01-14 | | | |
| | | GetMail | [] | win.getmail | [u'Comment Crew'] | 2018-02-10 | | | |
| | | GetMyPass | [u'getmypos'] | win.getmypass | [] | 2018-02-04 | | | |
| | | get_pwd | [] | win.get_pwd | [] | 2020-01-23 | | | |
| | | GGLdr | [] | vbs.ggldr | [] | 2020-05-27 | | | |
| | | Gh0stnet | [u'Remosh'] | win.ghostnet | [] | 2019-04-03 | | | |
| | | Ghimob | [] | apk.ghimob | [] | 2020-11-11 | | | |
| | | Ghole | [u'Gholee', u'CoreImpact (Modified)'] | win.ghole | [u'Rocket Kitten'] | 2019-02-19 | | | |
| | | Ghost RAT | [u'Farfli', u'Gh0st RAT', u'PCRat'] | win.ghost_rat | [u'Emissary Panda', u'Hurricane Panda', u'Lazarus Group', u'Leviathan', u'Stone Panda'] | 2020-12-18 | | | |
| | | GhostAdmin | [u'Ghost iBot'] | win.ghost_admin | [] | 2017-04-05 | | | |
| | | GhostCtrl | [] | apk.ghostctrl | [] | 2017-07-19 | | | |
| | | GhostMiner | [] | ps1.ghostminer | [] | 2019-09-30 | | | |
| | | Gibberish Ransomware | [] | win.gibberish | [] | 2020-03-22 | | | |
| | | Ginp | [] | apk.ginp | [] | 2020-06-19 | | | |
| | | Ginwui | [] | win.ginwui | [] | 2020-07-15 | | | |
| | | Gitpaste-12 | [] | elf.gitpaste12 | [] | 2020-11-09 | | | |
| | | GlanceLove | [] | apk.glancelove | [u'AridViper'] | 2018-07-06 | | | |
| | | Glasses | [u'Wordpress Bruteforcer'] | win.glasses | [] | 2016-12-29 | | | |
| | | GlassRAT | [] | win.glassrat | [] | 2018-03-26 | | | |
| | | GlitchPOS | [] | win.glitch_pos | [] | 2019-03-13 | | | |
| | | Globe | [] | win.globe_ransom | [] | 2017-02-15 | | | |
| | | GlobeImposter | [] | win.globeimposter | [] | 2020-06-24 | | | |
| | | GlooxMail | [] | win.glooxmail | [u'Comment Crew'] | 2018-02-13 | | | |
| | | Glupteba | [] | win.glupteba | [] | 2020-12-08 | | | |
| | | Gmera | [u'StockSteal', u'Kassi'] | osx.gmera | [] | 2020-07-20 | | | |
| | | GoBotKR | [] | win.gobotkr | [] | 2019-07-11 | | | |
| | | goCryptoLocker | [] | win.gocryptolocker | [] | 2020-05-02 | | | |
| | | Godlike12 | [u'GOSLU'] | win.godlike12 | [] | 2020-07-30 | | | |
| | | Godlua | [] | elf.godlua | [] | 2019-07-02 | | | |
| | | goDoH | [] | win.godoh | [] | 2019-12-08 | | | |
| | | Godzilla Loader | [] | win.godzilla_loader | [] | 2019-06-08 | | | |
| | | Goggles | [] | win.goggles | [u'Comment Crew'] | 2018-02-10 | | | |
| | | GoGoogle | [u'BossiTossi'] | win.gogoogle | [] | 2020-07-07 | | | |
| | | GoldDragon | [] | win.gold_dragon | [] | 2020-11-02 | | | |
| | | GoldenEagle | [] | apk.goldeneagle | [u'HenBox'] | 2020-07-15 | | | |
| | | GoldenEye | [u'Petya/Mischa'] | win.goldeneye | [] | 2017-07-17 | | | |
| | | GoldenHelper | [] | win.goldenhelper | [] | 2020-07-15 | | | |
| | | GoldenRAT | [] | apk.goldenrat | [u'APT-C-27'] | 2019-03-21 | | | |
| | | GoldenSpy | [] | win.goldenspy | [] | 2020-11-09 | | | |
| | | Golroted | [] | win.golroted | [] | 2017-12-14 | | | |
| | | Gomorrah stealer | [] | win.gomorrah_stealer | [] | 2020-05-18 | | | |
| | | Goodor | [u'Fuerboos'] | win.goodor | [] | 2020-04-21 | | | |
| | | GoogleDrive RAT | [] | win.google_drive_rat | [u'OilRig'] | 2018-03-26 | | | |
| | | GooPic Drooper | [] | win.goopic | [] | 2018-01-25 | | | |
| | | GootKit | [u'Waldek', u'Xswkit', u'talalpek'] | win.gootkit | [] | 2020-12-14 | | | |
| | | Gophe | [] | win.gophe | [] | 2020-10-05 | | | |
| | | GOSH | [] | elf.gosh | [] | 2020-08-18 | | | |
| | | GovRAT | [] | win.govrat | [] | 2018-04-20 | | | |
| | | Gozi | [u'CRM', u'Gozi CRM', u'Papras', u'Snifula', u'Ursnif'] | win.gozi | [] | 2020-12-26 | | | |
| | | GPCode | [] | win.gpcode | [] | 2018-02-09 | | | |
| | | GPlayed | [] | apk.gplayed | [] | 2018-11-16 | | | |
| | | GrabBot | [] | win.grabbot | [] | 2017-03-28 | | | |
| | | Graftor | [] | win.graftor | [] | 2017-09-14 | | | |
| | | Grandoreiro | [] | win.grandoreiro | [] | 2020-07-30 | | | |
| | | GrandSteal | [] | win.grandsteal | [] | 2019-10-23 | | | |
| | | Grateful POS | [u'FrameworkPOS', u'SCRAPMINT', u'trinity'] | win.grateful_pos | [u'Skeleton Spider', u'FIN6'] | 2020-07-23 | | | |
| | | Gratem | [] | win.gratem | [] | 2017-04-06 | | | |
| | | Gravity RAT | [] | win.gravity_rat | [] | 2020-10-23 | | | |
| | | GREASE | [] | win.grease | [] | 2019-01-18 | | | |
| | | GreedyAntd | [] | elf.greedyantd | [u'Pacha Group'] | 2019-05-18 | | | |
| | | GreenShaitan | [u'eoehttp'] | win.greenshaitan | [] | 2018-04-23 | | | |
| | | grelos | [] | js.grelos | [] | 2020-11-23 | | | |
| | | GreyEnergy | [] | win.grey_energy | [u'GreyEnergy'] | 2020-05-23 | | | |
| | | Griffon | [] | js.griffon | [u'Anunak'] | 2020-06-25 | | | |
| | | GRILLMARK | [] | win.grillmark | [u'Leviathan'] | 2019-05-15 | | | |
| | | Grinju Downloader | [] | vbs.grinju | [] | 2020-10-05 | | | |
| | | GROK | [] | win.grok | [u'Equation Group'] | 2017-05-03 | | | |
| | | GRUNT | [] | win.grunt | [] | 2020-02-20 | | | |
| | | gsecdump | [] | win.gsecdump | [] | 2018-04-17 | | | |
| | | GuiInject | [] | ios.guiinject | [] | 2017-02-15 | | | |
| | | GUP Proxy Tool | [] | win.gup_proxy | [] | 2019-08-07 | | | |
| | | Gustuff | [] | apk.gustuff | [] | 2020-02-27 | | | |
| | | H1N1 Loader | [] | win.h1n1 | [] | 2016-12-27 | | | |
| | | Hacksfase | [] | win.hacksfase | [u'Comment Crew'] | 2018-02-13 | | | |
| | | HackSpy | [] | win.hackspy | [] | 2018-02-21 | | | |
| | | Haiduc | [] | elf.haiduc | [] | 2018-11-08 | | | |
| | | Hajime | [] | elf.hajime | [] | 2020-10-12 | | | |
| | | Hakai | [] | elf.hakai | [] | 2018-09-05 | | | |
| | | Hakbit | [u'Thanos Ransomware'] | win.hakbit | [] | 2021-01-01 | | | |
| | | HALFBAKED | [] | vbs.halfbaked | [u'Anunak'] | 2020-06-25 | | | |
| | | Hamweq | [] | win.hamweq | [] | 2020-07-16 | | | |
| | | Hancitor | [u'Chanitor'] | win.hancitor | [] | 2021-01-11 | | | |
| | | Hand of Thief | [u'Hanthie'] | elf.hand_of_thief | [] | 2020-03-02 | | | |
| | | HandyMannyPot | [] | elf.handymannypot | [] | 2019-10-04 | | | |
| | | HappyLocker (HiddenTear?) | [] | win.happy_locker | [] | 2017-04-29 | | | |
| | | HARDRAIN | [] | apk.hardrain | [u'Lazarus Group'] | 2019-09-09 | | | |
| | | HARDRAIN | [] | win.hardrain | [u'Lazarus Group'] | 2020-03-11 | | | |
| | | Harnig | [u'Piptea'] | win.harnig | [] | 2018-01-22 | | | |
| | | Havex RAT | [] | win.havex_rat | [u'Energetic Bear'] | 2021-01-05 | | | |
| | | HAWKBALL | [] | win.hawkball | [] | 2019-07-10 | | | |
| | | HawkEye Keylogger | [u'HawkEye', u'HawkEye Reborn', u'Predator Pain'] | win.hawkeye_keylogger | [] | 2020-08-21 | | | |
| | | HDMR Ransomware | [u'GO-SPORT'] | win.hdmr | [] | 2019-12-18 | | | |
| | | HDRoot | [] | win.hdroot | [u'Axiom'] | 2020-03-19 | | | |
| | | Helauto | [] | win.helauto | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Helminth | [] | win.helminth | [u'APT34'] | 2020-07-30 | | | |
| | | Heloag | [] | win.heloag | [] | 2018-01-25 | | | |
| | | HenBox | [] | apk.henbox | [u'HenBox'] | 2020-03-02 | | | |
| | | Herbst | [] | win.herbst | [] | 2018-01-29 | | | |
| | | Heriplor | [] | win.heriplor | [u'Energetic Bear'] | 2020-04-21 | | | |
| | | Hermes | [] | win.hermes | [u'Lazarus Group'] | 2020-12-11 | | | |
| | | Hermes Ransomware | [] | win.hermes_ransom | [] | 2020-02-27 | | | |
| | | HeroRAT | [] | apk.hero_rat | [] | 2018-06-25 | | | |
| | | HerpesBot | [] | win.herpes | [] | 2016-05-31 | | | |
| | | HesperBot | [] | win.hesperbot | [] | 2016-04-18 | | | |
| | | Hi-Zor RAT | [] | win.hi_zor_rat | [] | 2018-02-15 | | | |
| | | Hidden Bee | [] | win.hiddenbee | [] | 2019-08-19 | | | |
| | | HiddenAd | [] | apk.hiddenad | [] | 2020-07-30 | | | |
| | | HiddenLotus | [] | osx.hiddenlotus | [] | 2018-03-23 | | | |
| | | HiddenTear | [u'FuckUnicorn'] | win.hiddentear | [] | 2020-06-08 | | | |
| | | HiddenWasp | [] | elf.hiddenwasp | [] | 2020-06-16 | | | |
| | | Hide and Seek | [u'HNS'] | elf.hideandseek | [] | 2018-12-19 | | | |
| | | HideDRV | [] | win.hidedrv | [] | 2020-05-23 | | | |
| | | HIGHNOON | [] | win.highnoon | [u'APT41', u'Aurora Panda'] | 2019-10-04 | | | |
| | | HIGHNOON.BIN | [] | win.highnoon_bin | [u'APT41'] | 2019-08-13 | | | |
| | | HIGHNOTE | [u'ChyNode'] | win.highnote | [u'Axiom'] | 2019-07-31 | | | |
| | | HiKit | [] | win.hikit | [u'Aurora Panda', u'Hurricane Panda'] | 2020-05-23 | | | |
| | | himan | [] | win.himan | [] | 2018-09-11 | | | |
| | | Himera Loader | [] | win.himera_loader | [] | 2020-05-18 | | | |
| | | Hisoka | [] | win.hisoka | [] | 2020-11-09 | | | |
| | | HLUX | [] | win.hlux | [] | 2016-04-26 | | | |
| | | homefry | [] | win.homefry | [u'Leviathan'] | 2020-05-23 | | | |
| | | HookInjEx | [] | win.hookinjex | [] | 2020-09-21 | | | |
| | | HOPLIGHT | [u'HANGMAN'] | win.hoplight | [u'Lazarus Group'] | 2020-08-13 | | | |
| | | HOTCROISSANT | [] | win.hotcroissant | [u'Lazarus Group'] | 2020-04-17 | | | |
| | | HOTWAX | [] | win.hotwax | [u'Lazarus Group'] | 2019-10-14 | | | |
| | | Houdini | [u'Hworm', u'Njw0rm', u'Jenxcus', u'Kognito', u'WSHRAT'] | win.houdini | [] | 2020-11-09 | | | |
| | | HtBot | [] | win.htbot | [] | 2017-05-29 | | | |
| | | HTML5 Encoding | [] | js.turla_ff_ext | [u'Turla Group'] | 2017-07-11 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | HTran | [u'HUC Packet Transmit Tool'] | win.htran | [u'GALLIUM', u'UPS'] | 2020-06-22 | | | |
| | | HttpBrowser | [u'HttpDump'] | win.httpbrowser | [u'Wekby', u'Emissary Panda'] | 2020-05-23 | | | |
| | | httpdropper | [u'httpdr0pper'] | win.httpdropper | [] | 2018-09-13 | | | |
| | | http_troy | [] | win.http_troy | [] | 2018-09-19 | | | |
| | | Hunter Stealer | [] | win.hunter | [] | 2020-11-12 | | | |
| | | Hupigon | [] | win.hupigon | [] | 2020-05-02 | | | |
| | | Hussar | [] | win.hussar | [u'Calypso group'] | 2019-11-12 | | | |
| | | HxDef | [u'HacDef', u'HackerDefender', u'HackDef'] | win.hxdef | [] | 2020-03-19 | | | |
| | | Hydra | [] | apk.hydra | [] | 2020-02-27 | | | |
| | | HyperBro | [] | win.hyperbro | [u'Emissary Panda'] | 2020-12-10 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2020-03-02 | | | |
| | | IcedID | [u'BokBot', u'IceID'] | win.icedid | [u'Lunar Spider'] | 2021-01-11 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2017-12-05 | | | |
| | | Icefog | [u'Fucobha'] | win.icefog | [] | 2020-06-30 | | | |
| | | IceRat | [] | jar.icerat | [] | 2020-12-03 | | | |
| | | Icnanker | [] | elf.icnanker | [] | 2020-04-01 | | | |
| | | IconDown | [] | win.icondown | [u'BlackTech'] | 2019-12-08 | | | |
| | | IcyHeart | [u'Troxen'] | win.icyheart | [] | 2020-03-19 | | | |
| | | IDKEY | [] | win.idkey | [] | 2017-09-20 | | | |
| | | IISniff | [] | win.iisniff | [] | 2018-05-14 | | | |
| | | Iloveyou | [u'LoveLetter', u'Love Bug'] | vbs.iloveyou | [] | 2019-05-20 | | | |
| | | Imecab | [] | win.imecab | [u'Leafminer'] | 2020-04-21 | | | |
| | | Imminent Monitor RAT | [] | win.imminent_monitor_rat | [u'APT-C-36'] | 2020-05-23 | | | |
| | | iMuler | [u'Revir'] | osx.imuler | [] | 2019-09-19 | | | |
| | | IndigoDrop | [] | win.indigodrop | [] | 2020-12-26 | | | |
| | | Industroyer | [u'Crash', u'CrashOverride'] | win.industroyer | [u'ELECTRUM'] | 2021-01-05 | | | |
| | | Inferno | [] | win.inferno | [] | 2020-03-13 | | | |
| | | InfoDot Ransomware | [] | win.infodot | [] | 2020-04-01 | | | |
| | | Infy | [u'Foudre'] | win.infy | [] | 2020-11-04 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | inter | [] | js.inter | [] | 2019-07-31 | | | |
| | | Interception | [] | win.interception | [] | 2020-06-17 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2020-06-29 | | | |
| | | IoT Reaper | [u'IoTroop', u'Reaper', u'iotreaper'] | elf.iot_reaper | [] | 2020-04-13 | | | |
| | | IPStorm | [u'InterPlanetary Storm'] | apk.ipstorm | [] | 2020-10-23 | | | |
| | | IPStorm | [u'InterPlanetary Storm'] | elf.ipstorm | [] | 2020-12-26 | | | |
| | | Irc16 | [] | elf.backdoor_irc16 | [] | 2017-02-15 | | | |
| | | Ironcat | [] | win.ironcat | [] | 2020-10-05 | | | |
| | | IRONHALO | [] | win.ironhalo | [u'APT 16'] | 2020-04-16 | | | |
| | | IRRat | [] | apk.irrat | [] | 2018-03-22 | | | |
| | | ISFB | [u'Gozi ISFB', u'IAP', u'Pandemyia'] | win.isfb | [] | 2021-01-11 | | | |
| | | ISMAgent | [] | win.ismagent | [u'Greenbug', u'APT34'] | 2020-05-20 | | | |
| | | ISMDoor | [] | win.ismdoor | [u'Greenbug'] | 2020-05-20 | | | |
| | | iSpy Keylogger | [] | win.ispy_keylogger | [] | 2020-05-23 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsraBye | [] | win.israbye | [] | 2019-01-23 | | | |
| | | IsSpace | [u'NfLog RAT'] | win.isspace | [u'DragonOK', u'Samurai Panda'] | 2020-05-23 | | | |
| | | IXWare | [] | win.ixware | [] | 2020-10-19 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | JadeRAT | [] | apk.jaderat | [] | 2017-11-17 | | | |
| | | Jaff | [] | win.jaff | [] | 2020-06-24 | | | |
| | | Jager Decryptor | [] | win.jager_decryptor | [] | 2016-12-28 | | | |
| | | Jaku | [u'Reconcyc', u'KCNA Infostealer', u'C3PRO-RACOON'] | win.jaku | [] | 2019-01-23 | | | |
| | | Janicab | [] | osx.janicab | [] | 2020-11-04 | | | |
| | | jason | [] | win.jason | [u'OilRig'] | 2020-05-23 | | | |
| | | JasperLoader | [] | ps1.jasperloader | [] | 2020-03-27 | | | |
| | | Jasus | [] | win.jasus | [u'Cleaver'] | 2017-05-21 | | | |
| | | JavaDispCash | [] | jar.javadispcash | [] | 2020-01-06 | | | |
| | | JavaLocker | [u'JavaEncrypt Ransomware'] | jar.javalocker | [] | 2020-03-27 | | | |
| | | JCry | [] | win.jcry | [] | 2019-03-06 | | | |
| | | Jeno Ransomware | [u'Valeria', u'Jest'] | win.jeno | [] | 2020-04-20 | | | |
| | | JenX | [] | elf.jenx | [] | 2018-02-26 | | | |
| | | JhoneRAT | [] | win.jhone_rat | [] | 2020-12-26 | | | |
| | | Jigsaw | [] | win.jigsaw | [] | 2016-04-19 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | Joanap | [] | win.joanap | [u'Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Joker | [] | apk.joker | [] | 2020-11-19 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JQJSNICKER | [] | win.jqjsnicker | [u'CIA'] | 2017-03-28 | | | |
| | | jRAT | [u'Jacksbot'] | jar.jrat | [] | 2020-06-08 | | | |
| | | JripBot | [] | win.jripbot | [u'WildNeutron'] | 2020-03-13 | | | |
| | | JSOutProx | [] | win.jsoutprox | [] | 2020-05-23 | | | |
| | | jspRAT | [] | js.jsprat | [] | 2020-05-27 | | | |
| | | jSpy | [] | jar.jspy | [] | 2018-05-14 | | | |
| | | JSSLoader | [] | win.jssloader | [u'Anunak'] | 2021-01-10 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2020-06-19 | | | |
| | | JUMPALL | [] | win.jumpall | [u'APT41'] | 2019-08-13 | | | |
| | | Jupyter Stealer | [] | win.jupyter | [] | 2020-12-08 | | | |
| | | KAgent | [] | win.kagent | [u'Cleaver'] | 2017-05-21 | | | |
| | | Kaiji | [] | elf.kaiji | [] | 2020-12-26 | | | |
| | | Kaiten | [u'STD'] | elf.kaiten | [] | 2020-10-23 | | | |
| | | Karagany | [u'Karagny'] | win.karagany | [u'Energetic Bear'] | 2020-05-23 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2018-06-14 | | | |
| | | Karkoff | [u'CACTUSPIPE', u'MailDropper'] | win.karkoff | [u'DNSpionage'] | 2020-08-05 | | | |
| | | KasperAgent | [] | win.kasperagent | [] | 2017-07-11 | | | |
| | | Kazuar | [] | win.kazuar | [u'Turla Group'] | 2021-01-11 | | | |
| | | Kegotip | [] | win.kegotip | [] | 2020-05-23 | | | |
| | | KEKW Ransomware | [u'KEKW-Locker'] | win.kekw | [] | 2020-03-28 | | | |
| | | Kelihos | [] | win.kelihos | [] | 2020-04-06 | | | |
| | | KeRanger | [] | osx.keranger | [] | 2017-02-15 | | | |
| | | kerberods | [] | elf.kerberods | [u'Rocke'] | 2020-05-18 | | | |
| | | KerrDown | [] | win.kerrdown | [u'APT32'] | 2020-11-11 | | | |
| | | Ketrican | [] | win.ketrican | [u'Mirage'] | 2020-06-18 | | | |
| | | Ketrum | [] | win.ketrum | [u'Mirage'] | 2020-08-12 | | | |
| | | KevDroid | [] | apk.kevdroid | [u'APT37'] | 2020-03-03 | | | |
| | | KeyBase | [u'Kibex'] | win.keybase | [] | 2019-02-08 | | | |
| | | KeyBoy | [u'TSSL'] | win.keyboy | [u'Pirate Panda'] | 2020-06-18 | | | |
| | | Keydnap | [] | osx.keydnap | [] | 2019-09-01 | | | |
| | | KEYMARBLE | [] | win.keymarble | [u'Lazarus Group'] | 2020-03-11 | | | |
| | | KeyPlexer | [] | py.keyplexer | [] | 2020-03-13 | | | |
| | | KGH_SPY | [] | win.kgh_spy | [] | 2020-11-04 | | | |
| | | KHRAT | [] | win.khrat | [u'DragonOK'] | 2020-04-06 | | | |
| | | Kikothac | [] | win.kikothac | [] | 2018-09-06 | | | |
| | | KillDisk | [] | win.killdisk | [u'Lazarus Group', u'Sandworm', u'TeleBots'] | 2020-05-23 | | | |
| | | KimJongRat | [] | win.kimjongrat | [] | 2020-10-27 | | | |
| | | Kimsuky | [] | win.kimsuky | [u'Kimsuki', u'Kimsuky'] | 2020-12-16 | | | |
| | | KINS | [u'Kasper Internet Non-Security', u'Maple'] | win.kins | [] | 2018-11-08 | | | |
| | | Kinsing | [u'h2miner'] | elf.kinsing | [] | 2020-12-26 | | | |
| | | Kitmos | [u'KitM'] | osx.kitmos | [] | 2018-03-17 | | | |
| | | KIVARS | [] | win.kivars | [] | 2020-10-04 | | | |
| | | KleptoParasite Stealer | [u'Joglog', u'Parasite'] | win.kleptoparasite_stealer | [] | 2020-02-16 | | | |
| | | KLRD | [] | win.klrd | [u'Anunak'] | 2019-03-05 | | | |
| | | Knot Ransomware | [] | win.knot | [] | 2021-01-04 | | | |
| | | Koadic | [] | win.koadic | [u'Sofacy'] | 2020-12-08 | | | |
| | | KokoKrypt | [] | win.kokokrypt | [] | | | | |
| | | Koler | [] | apk.koler | [] | 2017-11-21 | | | |
| | | Komplex | [u'SedUploader', u'JHUHUGIT', u'JKEYSKW'] | osx.komplex | [u'Sofacy'] | 2017-02-15 | | | |
| | | KOMPROGO | [u'Splinter RAT'] | win.komprogo | [u'APT32'] | 2019-06-17 | | | |
| | | Konni | [] | win.konni | [] | 2020-08-14 | | | |
| | | KoobFace | [] | win.koobface | [] | 2016-04-19 | | | |
| | | KopiLuwak | [] | js.kopiluwak | [u'Turla Group'] | 2020-02-27 | | | |
| | | Korlia | [u'Bisonal'] | win.korlia | [u'Tonto Team'] | 2020-10-08 | | | |
| | | Kovter | [] | win.kovter | [] | 2020-12-11 | | | |
| | | KPOT Stealer | [u'Khalesi', u'Kpot'] | win.kpot_stealer | [] | 2020-12-15 | | | |
| | | Kraken | [] | win.kraken | [] | 2018-11-08 | | | |
| | | KrBanker | [u'BlackMoon'] | win.krbanker | [] | 2019-03-20 | | | |
| | | KrDownloader | [] | win.krdownloader | [] | 2017-05-12 | | | |
| | | Kronos | [u'Osiris'] | win.kronos | [] | 2020-08-18 | | | |
| | | KryptoCibule | [] | win.kryptocibule | [] | 2020-09-03 | | | |
| | | KSL0T | [] | win.ksl0t | [u'Turla Group'] | 2019-07-31 | | | |
| | | KSREMOTE | [] | apk.ksremote | [] | 2020-10-27 | | | |
| | | Kuaibu | [u'Barys', u'Gofot', u'Kuaibpy'] | win.kuaibu8 | [] | 2017-03-29 | | | |
| | | Kuluoz | [] | win.kuluoz | [] | 2017-11-23 | | | |
| | | Kurton | [] | win.kurton | [u'Comment Crew'] | 2018-02-13 | | | |
| | | Kutaki | [] | win.kutaki | [] | 2019-01-29 | | | |
| | | Kwampirs | [] | win.kwampirs | [u'Orangeworm'] | 2020-08-05 | | | |
| | | L0rdix | [u'lordix'] | win.lordix | [] | 2019-08-15 | | | |
| | | Lady | [] | elf.lady | [] | 2017-04-06 | | | |
| | | LALALA Stealer | [] | win.lalala_stealer | [] | 2020-06-30 | | | |
| | | Lambert | [u'Plexor'] | win.lambert | [u'Longhorn'] | 2020-04-21 | | | |
| | | Lamdelin | [] | win.lamdelin | [] | 2018-04-12 | | | |
| | | lampion | [] | vbs.lampion | [] | 2020-09-21 | | | |
| | | Laoshu | [] | osx.laoshu | [] | 2017-08-28 | | | |
| | | LatentBot | [] | win.latentbot | [] | 2017-06-11 | | | |
| | | Laturo Stealer | [] | win.laturo | [] | 2019-10-31 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2020-11-23 | | | |
| | | Laziok | [] | win.laziok | [] | 2018-01-17 | | | |
| | | LazyCat | [] | win.lazycat | [u'Leviathan'] | 2020-09-25 | | | |
| | | Leakthemall Ransomware | [] | win.leakthemall | [] | 2020-09-15 | | | |
| | | Leash | [] | win.leash | [u'Magic Hound'] | 2017-12-15 | | | |
| | | LeetHozer | [] | elf.leethozer | [] | 2020-05-20 | | | |
| | | Leouncia | [u'shoco'] | win.leouncia | [] | 2018-09-19 | | | |
| | | Lethic | [] | win.lethic | [] | 2017-11-21 | | | |
| | | Leverage | [] | osx.leverage | [] | 2017-08-31 | | | |
| | | Liderc | [] | win.liderc | [u'Tortoiseshell'] | 2019-10-04 | | | |
| | | LightBot | [] | ps1.lightbot | [] | 2020-11-23 | | | |
| | | LightNeuron | [u'NETTRANS', u'XTRANS'] | win.lightneuron | [u'Turla Group'] | 2020-07-24 | | | |
| | | lightSpy | [] | ios.lightspy | [] | 2020-03-27 | | | |
| | | Ligsterac | [] | win.ligsterac | [] | 2019-06-23 | | | |
| | | Lilith | [] | win.lilith | [u'Tick'] | 2019-12-08 | | | |
| | | LiLock | [u'Lilu', u'Lilocked'] | elf.lilock | [] | 2019-09-10 | | | |
| | | lilyofthevalley | [] | elf.lilyofthevalley | [] | 2019-08-12 | | | |
| | | limedownloader | [] | win.limedownloader | [] | 2019-07-31 | | | |
| | | limeminer | [] | win.limeminer | [] | 2019-07-31 | | | |
| | | LimeRAT | [] | win.limerat | [u'APT-C-36'] | 2020-10-07 | | | |
| | | Limitail | [] | win.limitail | [] | 2017-04-29 | | | |
| | | LinseningSvr | [] | win.linseningsvr | [] | 2020-05-27 | | | |
| | | LiquorBot | [] | elf.liquorbot | [] | 2020-01-13 | | | |
| | | Listrix | [] | win.listrix | [u'Energetic Bear'] | 2020-04-21 | | | |
| | | LiteDuke | [] | win.liteduke | [u'APT 29'] | 2020-05-18 | | | |
| | | LiteHTTP | [] | win.litehttp | [] | 2019-09-20 | | | |
| | | LNKR | [] | js.lnkr | [] | 2020-05-05 | | | |
| | | LockBit | [u'ABCD Ransomware'] | win.lockbit | [] | 2020-12-08 | | | |
| | | LockerGoga | [] | win.lockergoga | [u'FIN6'] | 2020-07-24 | | | |
| | | LockPOS | [] | win.lock_pos | [] | 2018-02-26 | | | |
| | | lockscreen | [] | vbs.lockscreen | [] | 2020-07-30 | | | |
| | | Locky | [] | win.locky | [u'TA505'] | 2020-11-26 | | | |
| | | Locky (Decryptor) | [] | win.locky_decryptor | [] | 2016-04-19 | | | |
| | | Locky Loader | [] | win.locky_loader | [] | 2018-01-11 | | | |
| | | Loda | [u'LodaRAT', u'Nymeria'] | win.loda | [] | 2020-10-04 | | | |
| | | LODEINFO | [] | win.lodeinfo | [] | 2021-01-01 | | | |
| | | Loerbas | [] | elf.loerbas | [] | 2020-05-18 | | | |
| | | Log Collector | [] | elf.log_collector | [] | 2019-12-18 | | | |
| | | Logedrut | [] | win.logedrut | [] | 2018-04-13 | | | |
| | | LogPOS | [] | win.logpos | [] | 2018-02-10 | | | |
| | | LoJax | [] | win.lojax | [u'Sofacy'] | 2020-04-21 | | | |
| | | Loki | [] | apk.loki | [] | 2017-03-24 | | | |
| | | Loki Password Stealer (PWS) | [u'Loki', u'LokiPWS', u'LokiBot'] | win.lokipws | [u'SWEED', u'The Gorgon Group', u'Cobalt'] | 2021-01-10 | | | |
| | | LokiBot | [] | apk.lokibot | [] | 2020-07-15 | | | |
| | | LOLSnif | [] | win.lolsnif | [] | 2020-09-01 | | | |
| | | LONGWATCH | [] | win.longwatch | [u'APT34'] | 2019-07-23 | | | |
| | | looChiper Ransomware | [] | win.loochiper | [] | 2019-10-31 | | | |
| | | Lookback | [] | win.lookback | [u'TA410'] | 2021-01-05 | | | |
| | | Lootwodniw | [] | elf.lootwodniw | [u'Hellsing'] | 2020-12-03 | | | |
| | | Loup | [] | win.loup | [] | 2020-08-25 | | | |
| | | LOWBALL | [] | win.lowball | [u'Temper Panda'] | 2019-04-12 | | | |
| | | LOWKEY | [u'PortReuse'] | win.lowkey | [u'APT41'] | 2019-10-21 | | | |
| | | Lucifer | [] | win.lucifer | [] | 2020-09-18 | | | |
| | | LuckyCat | [] | apk.luckycat | [u'TA413'] | 2020-09-16 | | | |
| | | Luminosity RAT | [u'LuminosityLink'] | win.luminosity_rat | [u'Operation C-Major'] | 2020-08-30 | | | |
| | | LunchMoney | [] | win.lunchmoney | [u'Leviathan'] | 2019-03-10 | | | |
| | | Lurk | [] | win.lurk | [] | 2016-05-10 | | | |
| | | Luzo | [] | win.luzo | [] | 2016-05-31 | | | |
| | | Lyposit | [u'Lucky Locker', u'Adneukine', u'Bomba Locker'] | win.lyposit | [] | 2017-12-29 | | | |
| | | M00nD3V Logger | [] | win.m00nd3v | [] | 2020-07-16 | | | |
| | | MacDownloader | [] | osx.macdownloader | [] | 2020-05-23 | | | |
| | | Machete | [u'El Machete'] | win.machete | [] | 2019-12-07 | | | |
| | | MacInstaller | [] | osx.macinstaller | [] | 2017-02-15 | | | |
| | | MacRansom | [] | osx.macransom | [] | 2017-06-13 | | | |
| | | MacSpy | [] | osx.macspy | [] | 2017-06-13 | | | |
| | | MacVX | [] | osx.macvx | [] | 2017-02-15 | | | |
| | | MadMax | [] | win.madmax | [] | 2016-12-28 | | | |
| | | Magala | [] | win.magala | [] | 2017-08-01 | | | |
| | | magecart | [] | js.magecart | [u'FIN6', u'MageCart'] | 2020-12-17 | | | |
| | | Magniber | [] | win.magniber | [] | 2020-12-23 | | | |
| | | Mailto | [u'Koko Ransomware', u'NetWalker'] | win.mailto | [] | 2020-12-08 | | | |
| | | Maintools.js | [] | js.turla_maintools | [u'Turla Group'] | 2017-11-17 | | | |
| | | MajikPos | [] | win.majik_pos | [] | 2019-11-27 | | | |
| | | Makadocs | [] | win.makadocs | [u'Poseidon Group'] | 2020-07-15 | | | |
| | | MakLoader | [] | win.makloader | [] | 2018-10-03 | | | |
| | | Makop Ransomware | [] | win.makop_ransomware | [] | 2020-03-25 | | | |
| | | Maktub | [] | win.maktub | [] | 2016-04-19 | | | |
| | | MalumPOS | [] | win.malumpos | [] | 2018-04-23 | | | |
| | | Mamba | [u'HDDCryptor', u'DiskCryptor'] | win.mamba | [] | 2020-03-04 | | | |
| | | MaMi | [] | osx.mami | [] | 2018-01-14 | | | |
| | | ManameCrypt | [u'CryptoHost'] | win.manamecrypt | [] | 2018-02-05 | | | |
| | | Mandrake | [] | apk.mandrake | [] | 2020-05-14 | | | |
| | | Mangzamel | [u'junidor', u'mengkite', u'vedratve'] | win.mangzamel | [] | 2019-08-07 | | | |
| | | Manifestus | [] | win.manifestus_ransomware | [] | | | | |
| | | ManItsMe | [] | win.manitsme | [u'Comment Crew'] | 2018-02-13 | | | |
| | | Manuscrypt | [] | osx.manuscrypt | [u'Lazarus Group'] | 2020-12-26 | | | |
| | | Maoloa | [] | win.maoloa | [] | 2019-06-21 | | | |
| | | MAPIget | [] | win.mapiget | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Marap | [] | win.marap | [] | 2020-08-28 | | | |
| | | Marcher | [u'ExoBot'] | apk.marcher | [] | 2020-02-26 | | | |
| | | Mariposa | [u'Rimecud', u'Palevo', u'Autorun'] | win.mariposa | [] | 2019-10-09 | | | |
| | | Masad Stealer | [] | win.masad_stealer | [] | 2020-09-03 | | | |
| | | MASS Logger | [] | win.masslogger | [] | 2020-08-27 | | | |
| | | Masuta | [u'PureMasuta'] | elf.masuta | [u'Nexus Zeta'] | 2019-02-07 | | | |
| | | Matrix Banker | [] | win.matrix_banker | [] | 2017-07-11 | | | |
| | | Matrix Ransom | [] | win.matrix_ransom | [] | 2020-04-06 | | | |
| | | Matryoshka RAT | [] | win.matryoshka_rat | [u'Rocket Kitten'] | 2017-09-14 | | | |
| | | Matsnu | [] | win.matsnu | [] | 2016-04-19 | | | |
| | | Maudi | [] | win.maudi | [] | 2020-01-27 | | | |
| | | MazarBot | [] | apk.mazarbot | [] | 2017-04-19 | | | |
| | | Maze | [u'ChaCha'] | win.maze | [u'FIN6', u'TA2101'] | 2021-01-01 | | | |
| | | MBR Locker | [] | win.mbrlocker | [] | 2020-04-15 | | | |
| | | MBRlock | [u'DexLocker'] | win.mbrlock | [] | 2018-03-01 | | | |
| | | Mebromi | [u'MyBios'] | win.mebromi | [] | 2018-06-28 | | | |
| | | MECHANICAL | [u'GoldStamp'] | win.mechanical | [u'Kimsuky'] | 2020-07-24 | | | |
| | | Medre | [] | win.medre | [] | 2018-06-28 | | | |
| | | Medusa | [u'Gorgona'] | apk.medusa | [] | 2020-07-22 | | | |
| | | Medusa | [] | win.medusa | [] | 2020-05-11 | | | |
| | | MedusaLocker | [u'AKO Ransomware', u'AKO Doxware', u'MedusaReborn'] | win.medusalocker | [] | 2021-01-01 | | | |
| | | MegaCortex | [] | win.megacortex | [] | 2020-12-01 | | | |
| | | MeguminTrojan | [] | win.megumin | [] | 2019-05-03 | | | |
| | | Mekotio | [] | win.mekotio | [] | 2020-10-07 | | | |
| | | Melcoz | [] | win.melcoz | [] | 2020-07-15 | | | |
| | | Merlin | [] | win.merlin | [] | 2019-01-30 | | | |
| | | Mespinoza | [u'pysa'] | win.mespinoza | [] | 2021-01-11 | | | |
| | | MESSAGETAP | [] | elf.messagetap | [u'APT41'] | 2020-10-05 | | | |
| | | MetadataBin Ransomware | [u'Ransomware32'] | win.metadatabin | [] | 2020-10-29 | | | |
| | | METALJACK | [u'denesRAT'] | win.metaljack | [u'APT32'] | 2020-11-11 | | | |
| | | Metamorfo | [u'Casbaneiro'] | win.metamorfo | [] | 2020-08-19 | | | |
| | | Meterpreter | [] | apk.meterpreter | [] | 2020-12-10 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2021-01-11 | | | |
| | | Mewsei | [] | win.mewsei | [] | 2016-04-19 | | | |
| | | MgBot | [u'BLame', u'MgmBot'] | win.mgbot | [] | 2020-08-05 | | | |
| | | Miancha | [] | win.miancha | [] | 2017-05-21 | | | |
| | | Micrass | [] | win.micrass | [] | 2018-04-13 | | | |
| | | Microcin | [] | win.microcin | [] | 2020-10-02 | | | |
| | | Micropsia | [] | win.micropsia | [] | 2019-11-22 | | | |
| | | MiKey | [] | elf.mikey | [] | 2019-03-08 | | | |
| | | Mikoponi | [] | win.mikoponi | [] | 2019-10-13 | | | |
| | | MILKMAID | [] | win.milkmaid | [u'APT 30'] | 2018-04-26 | | | |
| | | Milum | [] | win.milum | [] | 2020-10-04 | | | |
| | | MimiKatz | [] | win.mimikatz | [u'APT32', u'Anunak', u'GALLIUM'] | 2020-12-16 | | | |
| | | MINEBIDGE | [u'GazGolder'] | win.minebridge | [] | 2020-05-14 | | | |
| | | MiniASP | [] | win.miniasp | [u'Comment Crew'] | 2018-02-10 | | | |
| | | MiniDuke | [] | win.miniduke | [u'APT 29'] | 2020-05-23 | | | |
| | | Mirage | [] | win.mirage | [u'Mirage'] | 2020-10-02 | | | |
| | | MirageFox | [] | win.miragefox | [u'Mirage'] | 2018-06-19 | | | |
| | | Mirai | [u'Katana'] | elf.mirai | [] | 2020-12-08 | | | |
| | | Mirai | [] | win.mirai | [] | 2020-05-10 | | | |
| | | Misdat | [] | win.misdat | [u'Dust Storm'] | 2018-01-23 | | | |
| | | Misfox | [u'MixFox', u'ModPack'] | win.misfox | [] | 2017-10-20 | | | |
| | | Mispadu | [u'URSA'] | win.mispadu | [] | 2020-09-24 | | | |
| | | Miuref | [] | win.miuref | [] | 2016-04-19 | | | |
| | | MM Core | [] | win.mm_core | [] | 2017-04-06 | | | |
| | | MobiRAT | [] | win.mobi_rat | [] | 2017-08-31 | | | |
| | | Mocton | [] | win.mocton | [] | 2016-04-19 | | | |
| | | ModPipe | [] | win.modpipe | [] | 2020-11-19 | | | |
| | | ModPOS | [u'straxbot'] | win.modpos | [] | 2018-04-23 | | | |
| | | Moker | [] | win.moker | [] | 2017-05-01 | | | |
| | | Mokes | [] | elf.mokes | [] | 2017-10-25 | | | |
| | | Mokes | [] | osx.mokes | [] | 2020-07-20 | | | |
| | | Mokes | [] | win.mokes | [] | 2020-03-09 | | | |
| | | Mole | [] | win.mole | [] | 2017-12-13 | | | |
| | | MoleNet | [] | win.molenet | [u'Molerats'] | 2020-12-15 | | | |
| | | Molerat Loader | [] | win.molerat_loader | [u'Molerats'] | 2020-12-10 | | | |
| | | Monero Miner | [u'CoinMiner'] | win.monero_miner | [] | 2017-11-16 | | | |
| | | Monokle | [] | apk.monokle | [] | 2019-08-12 | | | |
| | | MontysThree | [u'MT3'] | win.montysthree | [] | 2020-10-12 | | | |
| | | MooBot | [] | elf.moobot | [] | 2020-11-23 | | | |
| | | MoonWind | [] | win.moonwind | [] | 2017-04-05 | | | |
| | | Moose | [] | elf.moose | [] | 2019-09-24 | | | |
| | | MoqHao | [u'Shaoye', u'XLoader'] | apk.moqhao | [u'Roaming Mantis'] | 2020-06-25 | | | |
| | | More_eggs | [u'SpicyOmelette', u'SKID'] | js.more_eggs | [u'Cobalt', u'FIN6', u'VENOM SPIDER'] | 2020-09-15 | | | |
| | | MoriAgent | [] | win.moriagent | [u'MuddyWater'] | 2020-11-04 | | | |
| | | Morphine | [] | win.morphine | [] | 2017-08-22 | | | |
| | | Morto | [] | win.morto | [] | 2018-06-28 | | | |
| | | Mosquito | [] | win.mosquito | [u'Turla Group'] | 2020-05-23 | | | |
| | | Mount Locker | [] | win.mount_locker | [] | 2020-12-14 | | | |
| | | Moure | [] | win.moure | [] | 2016-04-19 | | | |
| | | mozart | [] | win.mozart | [] | 2018-01-25 | | | |
| | | Mozi | [] | elf.mozi | [] | 2020-08-25 | | | |
| | | MPKBot | [u'MPK'] | win.mpkbot | [u'Magic Hound', u'Rocket Kitten'] | 2019-02-17 | | | |
| | | MrBlack | [] | elf.mrblack | [] | 2017-02-15 | | | |
| | | MrDec Ransomware | [] | win.mrdec | [] | 2020-03-27 | | | |
| | | MrPeter | [] | win.mr_peter | [] | 2020-03-13 | | | |
| | | MS Exchange Tool | [] | win.exchange_tool | [u'Mirage'] | 2018-03-12 | | | |
| | | Mudwater | [] | apk.mudwater | [u'MuddyWater'] | 2019-06-23 | | | |
| | | Mughthesec | [] | osx.mughthesec | [] | 2017-08-10 | | | |
| | | Multigrain POS | [] | win.multigrain_pos | [] | 2018-02-07 | | | |
| | | murkytop | [] | win.murkytop | [u'Leviathan'] | 2020-05-23 | | | |
| | | Murofet | [] | win.murofet | [] | 2020-07-20 | | | |
| | | Mutabaha | [] | win.mutabaha | [] | 2017-02-15 | | | |
| | | MyDogs | [] | win.mydogs | [u'Kimsuki'] | 2020-09-23 | | | |
| | | MyDoom | [u'Novarg', u'Mimail'] | win.mydoom | [] | 2020-03-11 | | | |
| | | MyKings Spreader | [] | win.mykings_spreader | [] | 2020-08-18 | | | |
| | | MyloBot | [u'FakeDGA', u'WillExec'] | win.mylobot | [] | 2019-07-24 | | | |
| | | MysteryBot | [] | apk.mysterybot | [] | 2018-06-19 | | | |
| | | MZRevenge | [u'MaMo434376'] | win.mzrevenge | [] | 2020-03-27 | | | |
| | | N40 | [] | win.n40 | [] | 2019-03-05 | | | |
| | | Nabucur | [] | win.nabucur | [] | 2016-05-31 | | | |
| | | NACHOCHEESE | [u'Cyruslish', u'TWOPENCE', u'VIVACIOUSGIFT'] | win.nachocheese | [u'Lazarus Group'] | 2020-09-02 | | | |
| | | Nagini | [] | win.nagini | [] | 2017-02-15 | | | |
| | | Naikon | [] | win.naikon | [u'Naikon'] | 2020-05-11 | | | |
| | | NanHaiShu | [] | js.nanhaishu | [u'Leviathan'] | 2019-03-25 | | | |
| | | Nanocore RAT | [u'Nancrat', u'NanoCore'] | win.nanocore | [u'APT33', u'The Gorgon Group'] | 2020-12-26 | | | |
| | | NanoLocker | [] | win.nano_locker | [] | 2017-02-15 | | | |
| | | Narilam | [] | win.narilam | [] | 2018-06-28 | | | |
| | | Nautilus | [] | win.nautilus | [u'APT34', u'Turla Group'] | 2020-05-23 | | | |
| | | NavRAT | [] | win.navrat | [u'APT37'] | 2020-05-19 | | | |
| | | Necurs | [u'nucurs'] | win.necurs | [u'MONTY SPIDER'] | 2020-07-24 | | | |
| | | NedDnLoader | [] | win.neddnloader | [u'Lazarus Group'] | 2020-09-21 | | | |
| | | Nefilim Ransomware | [u'Nephilim Ransomware'] | win.nefilim | [] | 2021-01-01 | | | |
| | | Nemim | [u'Nemain'] | win.nemim | [u'DarkHotel'] | 2020-09-15 | | | |
| | | Nemty | [] | win.nemty | [] | 2020-07-30 | | | |
| | | neshta | [] | win.neshta | [] | 2019-11-05 | | | |
| | | NESTEGG | [] | win.nestegg | [u'Lazarus Group'] | 2019-10-14 | | | |
| | | NetC | [] | win.netc | [u'Cleaver'] | 2017-05-21 | | | |
| | | NETEAGLE | [u'Neteagle_Scout', u'ScoutEagle'] | win.neteagle | [u'APT 30'] | 2020-06-20 | | | |
| | | NetFlash | [] | win.netflash | [u'Turla Group'] | 2020-06-05 | | | |
| | | NetKey | [] | win.netkey | [] | 2019-09-06 | | | |
| | | Netrepser | [] | win.netrepser_keylogger | [] | 2017-05-12 | | | |
| | | NetSupportManager RAT | [u'NetSupport'] | win.netsupportmanager_rat | [] | 2020-11-23 | | | |
| | | NetTraveler | [u'TravNet'] | win.nettraveler | [u'NetTraveler'] | 2020-12-08 | | | |
| | | NetWire RC | [u'NetWeird', u'NetWire', u'Recam'] | win.netwire | [u'APT33'] | 2021-01-10 | | | |
| | | NetWorm | [] | py.networm | [] | 2020-03-13 | | | |
| | | Neuron | [] | win.neuron | [u'APT34', u'Turla Group'] | 2020-05-23 | | | |
| | | Neutrino | [u'Kasidet'] | win.neutrino | [] | 2020-02-03 | | | |
| | | Neutrino POS | [] | win.neutrino_pos | [] | 2017-07-12 | | | |
| | | NewCore RAT | [] | win.newcore_rat | [u'Hellsing'] | 2020-09-25 | | | |
| | | NewCT | [u'CT'] | win.new_ct | [u'DragonOK'] | 2020-05-23 | | | |
| | | NewPass | [] | win.newpass | [u'Turla Group'] | 2020-07-16 | | | |
| | | NewPosThings | [] | win.newposthings | [] | 2020-03-19 | | | |
| | | NewsReels | [] | win.newsreels | [u'Comment Crew'] | 2018-02-10 | | | |
| | | Nexster Bot | [] | win.nexster_bot | [] | 2017-04-29 | | | |
| | | Nextcry Ransomware | [] | elf.nextcry | [] | 2019-11-17 | | | |
| | | NexusLogger | [] | win.nexus_logger | [] | 2017-03-28 | | | |
| | | Ngioweb | [] | elf.ngioweb | [] | 2020-11-18 | | | |
| | | Ngioweb | [u'Grobios'] | win.ngioweb | [] | 2019-08-07 | | | |
| | | NgrBot | [] | win.dorkbot_ngrbot | [] | 2019-10-09 | | | |
| | | Nibiru | [] | win.nibiru | [] | 2020-11-19 | | | |
| | | nitlove | [] | win.nitlove | [] | 2018-08-23 | | | |
| | | Nitol | [] | win.nitol | [] | 2019-09-02 | | | |
| | | NixScare Stealer | [] | win.nixscare | [] | 2020-09-15 | | | |
| | | NjRAT | [u'Bladabindi'] | win.njrat | [u'Operation C-Major', u'The Gorgon Group'] | 2021-01-10 | | | |
| | | Nocturnal Stealer | [] | win.nocturnalstealer | [] | 2018-06-13 | | | |
| | | NodeJS Ransomware | [] | vbs.nodejs_ransom | [] | 2020-03-27 | | | |
| | | NodeRAT | [] | js.node_rat | [u'Tick'] | 2020-05-13 | | | |
| | | Nokki | [] | win.nokki | [u'APT37'] | 2020-07-24 | | | |
| | | NOTROBIN | [u'remove_bds'] | elf.notrobin | [] | 2020-12-26 | | | |
| | | Nozelesn (Decryptor) | [] | win.nozelesn_decryptor | [] | 2018-07-09 | | | |
| | | nRansom | [] | win.nransom | [] | 2017-09-26 | | | |
| | | Numando | [] | win.numando | [] | 2020-10-09 | | | |
| | | NVISOSPIT | [] | win.nvisospit | [] | 2019-06-23 | | | |
| | | Nymaim | [u'nymain'] | win.nymaim | [] | 2020-06-10 | | | |
| | | Nymaim2 | [] | win.nymaim2 | [] | 2018-05-01 | | | |
| | | Oblique RAT | [] | win.oblique_rat | [] | 2020-12-26 | | | |
| | | Obscene | [] | win.obscene | [] | 2020-03-09 | | | |
| | | OceanLotus | [] | osx.oceanlotus | [u'APT32'] | 2020-12-11 | | | |
| | | Oceansalt | [] | win.oceansalt | [] | 2018-10-19 | | | |
| | | Octopus | [] | ps1.octopus | [] | 2021-01-11 | | | |
| | | Octopus | [] | win.octopus | [] | 2020-12-26 | | | |
| | | Octopus Scanner | [] | jar.octopus_scanner | [] | 2020-06-08 | | | |
| | | OddJob | [] | win.oddjob | [u'Equation Group'] | 2017-05-01 | | | |
| | | Odinaff | [] | win.odinaff | [] | 2020-04-21 | | | |
| | | OilRig | [] | ps1.oilrig | [u'OilRig', u'APT39', u'Chafer'] | 2020-07-23 | | | |
| | | Okrum | [] | win.okrum | [u'Mirage'] | 2020-11-04 | | | |
| | | OLDBAIT | [u'Sasfis'] | win.oldbait | [u'Sofacy'] | 2018-11-28 | | | |
| | | Olympic Destroyer | [u'SOURGRAPE'] | win.olympic_destroyer | [] | 2020-12-03 | | | |
| | | Olyx | [] | osx.olyx | [] | 2018-06-28 | | | |
| | | OmniRAT | [] | apk.omnirat | [] | 2019-08-27 | | | |
| | | ONHAT | [] | win.onhat | [] | 2020-05-26 | | | |
| | | Oni Ransomware | [] | win.oni | [] | 2019-08-14 | | | |
| | | OnionDuke | [] | win.onionduke | [u'APT 29'] | 2020-07-06 | | | |
| | | OnlinerSpambot | [u'SBot', u'Onliner'] | win.onliner | [] | 2020-05-14 | | | |
| | | OopsIE | [] | win.oopsie | [u'OilRig'] | 2018-08-06 | | | |
| | | Opachki | [] | win.opachki | [] | 2018-06-28 | | | |
| | | OpBlockBuster | [] | win.op_blockbuster | [u'Lazarus Group'] | 2017-05-17 | | | |
| | | OpGhoul | [] | |