| | | Immortal Stealer | [] | win.immortal_stealer | [] | 2021-05-12 | | | |
| | | X-Files Stealer | [] | win.xfilesstealer | [] | 2022-04-20 | | | |
| | | 000Stealer | [] | win.000stealer | [] | 2022-05-04 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2022-11-25 | | | |
| | | 4h_rat | [] | win.4h_rat | ['Putter Panda'] | 2022-11-28 | | | |
| | | 7ev3n | [] | win.7ev3n | [] | 2018-01-23 | | | |
| | | 8.t Dropper | ['8t_dropper', 'RoyalRoad'] | win.8t_dropper | ['Hellsing', 'Ice Fog', 'Pirate Panda', 'RANCOR', 'TA428', 'Tick', 'Tonto Team', 'Karma Panda'] | 2023-03-13 | | | |
| | | 888 RAT | [] | apk.888_rat | [] | 2021-09-14 | | | |
| | | 9002 RAT | ['McRAT', 'Hydraq', 'HOMEUNIX'] | win.9002 | ['Aurora Panda', 'APT31', 'Group 27'] | 2022-09-20 | | | |
| | | Abaddon | [] | win.abaddon | [] | 2020-10-27 | | | |
| | | AbaddonPOS | ['PinkKite', 'TinyPOS'] | win.abaddon_pos | [] | 2022-11-15 | | | |
| | | abantes | [] | win.abantes | [] | 2018-10-18 | | | |
| | | Abbath Banker | [] | win.abbath_banker | [] | 2016-12-28 | | | |
| | | Abcbot | [] | elf.abcbot | [] | 2022-01-17 | | | |
| | | Aberebot | ['Escobar'] | apk.aberebot | [] | 2022-06-09 | | | |
| | | AbSent Loader | [] | win.absentloader | [] | 2020-05-18 | | | |
| | | AbstractEmu | [] | apk.abstract_emu | [] | 2022-06-09 | | | |
| | | ACBackdoor | [] | elf.acbackdoor | [] | 2022-02-10 | | | |
| | | ACBackdoor | [] | win.acbackdoor | [] | 2019-11-22 | | | |
| | | ACEHASH | [] | win.acehash | ['APT41'] | 2021-03-02 | | | |
| | | AcidBox | ['MagicScroll'] | win.acidbox | [] | 2020-08-14 | | | |
| | | AcidRain | [] | elf.acidrain | [] | 2023-03-20 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | ActionSpy | ['AxeSpy'] | apk.actionspy | ['POISON CARP'] | 2022-09-12 | | | |
| | | Adamantium Thief | [] | win.adamantium_thief | [] | 2021-03-31 | | | |
| | | AdamLocker | [] | win.adam_locker | [] | 2018-01-04 | | | |
| | | Adhubllka | [] | win.adhubllka | [] | 2020-07-23 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdoBot | [] | apk.adobot | [] | 2022-06-09 | | | |
| | | AdultSwine | [] | apk.adultswine | [] | 2018-01-23 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | AdWind | ['AlienSpy', 'JSocket', 'Frutas', 'UNRECOM', 'JBifrost', 'Sockrat'] | jar.adwind | [] | 2021-11-29 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2017-05-18 | | | |
| | | Adzok | [] | jar.adzok | ['Packrat'] | 2020-05-18 | | | |
| | | AESRT | [] | win.aesrt | [] | 2022-12-19 | | | |
| | | Afrodita | [] | win.afrodita | [] | 2020-03-27 | | | |
| | | AgeLocker | [] | elf.age_locker | [] | 2021-05-03 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2022-12-20 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2023-03-20 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2023-01-10 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2020-11-09 | | | |
| | | AhMyth | [] | apk.ahmyth | [] | 2022-12-24 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | AIRBREAK | ['Orz'] | js.airbreak | ['Leviathan'] | 2020-05-23 | | | |
| | | AirDropBot | ['CloudBot'] | elf.airdrop | [] | 2019-10-04 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2020-06-24 | | | |
| | | Albaniiutas | ['BlueTraveller'] | win.albaniiutas | ['TA428'] | 2022-07-29 | | | |
| | | Aldibot | [] | win.aldibot | [] | 2018-09-19 | | | |
| | | Alfonso Stealer | [] | win.alfonso_stealer | [] | 2021-01-11 | | | |
| | | Alien | ['AlienBot'] | apk.alien | [] | 2023-01-05 | | | |
| | | Alina POS | ['alina_spark', 'katrina', 'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | AllaKore | [] | win.allakore | [] | 2022-01-25 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | AllcomeClipper | [] | win.allcomeclipper | [] | 2022-10-14 | | | |
| | | Alma Communicator | [] | win.alma_communicator | ['OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | Almanahe | [] | win.almanahe | [] | 2020-07-15 | | | |
| | | AlmondRAT | [] | win.almondrat | ['HAZY TIGER'] | 2022-07-13 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | Alphabet Ransomware | [] | win.alphabet_ransomware | [] | 2022-11-12 | | | |
| | | AlphaLocker | [] | win.alphalocker | [] | 2018-01-11 | | | |
| | | AlphaNC | [] | win.alphanc | ['Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | ['Lazarus Group'] | 2017-05-17 | | | |
| | | Alureon | ['Olmarik', 'Pihar', 'TDL', 'TDSS', 'wowlik'] | win.alureon | [] | 2022-01-25 | | | |
| | | Amadey | [] | win.amadey | [] | 2023-03-20 | | | |
| | | AmpleBot | ['BlackRock'] | apk.amplebot | [] | 2022-03-14 | | | |
| | | AMTsol | ['Adupihan'] | win.amtsol | ['PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2022-07-01 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2022-12-01 | | | |
| | | AnchorDNS | [] | elf.anchor_dns | [] | 2022-11-03 | | | |
| | | AnchorMail | [] | win.anchormail | [] | 2022-09-13 | | | |
| | | Andardoor | [] | win.andardoor | ['Silent Chollima'] | 2023-02-24 | | | |
| | | Andromeda | ['Gamarue', 'B106-Gamarue', 'B67-SS-Gamarue', 'b66'] | win.andromeda | ['Operation C-Major'] | 2023-01-25 | | | |
| | | AndroMut | ['Gelup'] | win.andromut | ['TA505'] | 2022-02-14 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2022-05-13 | | | |
| | | Anel | ['UPPERCUT', 'lena'] | win.anel | ['Stone Panda'] | 2021-03-02 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2020-05-23 | | | |
| | | Ani-Shell | ['anishell'] | php.anishell | [] | 2019-10-24 | | | |
| | | ANTAK | [] | php.antak | ['APT39', 'Anunak'] | 2020-06-25 | | | |
| | | AnteFrigus | [] | win.antefrigus | [] | 2020-01-17 | | | |
| | | Antilam | ['Latinus'] | win.antilam | [] | 2018-07-24 | | | |
| | | Anubis | ['BankBot', 'android.bankbot', 'android.bankspy'] | apk.anubis | [] | 2022-07-12 | | | |
| | | Anubis | ['Anubis Stealer'] | win.anubis | [] | 2022-08-28 | | | |
| | | Anubis Loader | ['Kraken', 'Pepega'] | win.anubis_loader | [] | 2022-08-05 | | | |
| | | AnubisSpy | [] | apk.anubisspy | ['Sphinx (APT-C-15)'] | 2017-12-22 | | | |
| | | APERETIF | [] | win.aperetif | [] | 2023-03-20 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | Apollo | [] | win.apollo | [] | 2022-11-05 | | | |
| | | Apostle | [] | win.apostle | [] | 2023-01-19 | | | |
| | | AppleJeus | [] | osx.applejeus | ['Lazarus Group'] | 2023-01-02 | | | |
| | | AppleJeus | [] | win.applejeus | ['Lazarus Group'] | 2022-12-29 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2022-11-03 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | ['UPS'] | 2017-05-12 | | | |
| | | Archivist | [] | py.archivist | [] | 2020-03-13 | | | |
| | | ArdaMax | [] | win.ardamax | [] | 2021-06-30 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | Ares | [] | py.ares | [] | 2020-03-03 | | | |
| | | Ares | [] | win.ares | [] | 2022-09-07 | | | |
| | | ArguePatch | [] | win.arguepatch | ['APT28', 'Sandworm'] | 2022-09-26 | | | |
| | | Aria-body | [] | win.ariabody | ['Naikon'] | 2022-08-28 | | | |
| | | Arid Gopher | [] | win.aridgopher | ['AridViper'] | 2022-03-25 | | | |
| | | AridHelper | [] | win.aridhelper | ['AridViper'] | 2022-03-25 | | | |
| | | Arik Keylogger | ['Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | ['ArkeiStealer'] | win.arkei_stealer | [] | 2023-02-17 | | | |
| | | ArrowRAT | [] | win.arrowrat | [] | 2022-09-29 | | | |
| | | ARS VBS Loader | [] | win.ars_loader | [] | 2018-10-25 | | | |
| | | ARTFULPIE | [] | win.artfulpie | ['Lazarus Group'] | 2020-02-27 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2022-07-13 | | | |
| | | Asacub | [] | apk.asacub | [] | 2020-02-26 | | | |
| | | Asbit | [] | win.asbit | [] | 2022-09-01 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | Ashas | [] | apk.ashas | [] | 2019-10-28 | | | |
| | | ASPC | [] | win.aspc | [] | 2017-05-19 | | | |
| | | Asprox | ['Aseljo', 'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | ASPXSpy | [] | php.aspxspy | [] | 2022-10-07 | | | |
| | | Asruex | [] | win.asruex | ['DarkHotel'] | 2020-06-16 | | | |
| | | Astaroth | ['Guildma'] | win.astaroth | [] | 2022-08-28 | | | |
| | | AstraLocker | [] | win.astralocker | [] | 2022-08-05 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2023-03-13 | | | |
| | | ATANK | [] | apk.atank | [] | 2020-08-12 | | | |
| | | AthenaGo RAT | [] | win.athenago | [] | 2017-02-13 | | | |
| | | ATI-Agent | [] | win.ati_agent | ['APT 29'] | 2022-03-14 | | | |
| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2020-04-26 | | | |
| | | Atmosphere | [] | win.atmosphere | ['Silence group'] | 2019-05-10 | | | |
| | | ATMSpitter | [] | win.atmspitter | ['Cobalt'] | 2020-05-23 | | | |
| | | ATOMSILO | [] | win.atomsilo | [] | 2022-09-20 | | | |
| | | Attor | [] | win.attor | [] | 2022-12-12 | | | |
| | | August Stealer | [] | win.august_stealer | [] | 2017-01-10 | | | |
| | | Auriga | ['Riodrv'] | win.auriga | ['Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | ['OneKeyLocker'] | win.aurora | ['Oktropys'] | 2020-03-02 | | | |
| | | Aurora Stealer | [] | win.aurora_stealer | [] | 2023-01-19 | | | |
| | | AutoCAD Downloader | ['Acad.Bursted', 'Duxfas'] | fas.acad | [] | 2019-01-09 | | | |
| | | Avaddon | [] | win.avaddon | ['RIDDLE SPIDER'] | 2022-04-13 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2022-11-15 | | | |
| | | AvD Crypto Stealer | [] | win.avd | [] | 2022-03-28 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['Anunak'] | 2023-02-03 | | | |
| | | Aveo | [] | win.aveo | [] | 2020-05-23 | | | |
| | | Avoslocker | [] | elf.avoslocker | [] | 2022-10-10 | | | |
| | | AvosLocker | [] | win.avos_locker | [] | 2022-10-14 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | AXLocker | [] | win.axlocker | [] | 2022-11-21 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | Aytoke | [] | win.aytoke | [] | 2021-10-24 | | | |
| | | azazel | [] | elf.azazel | [] | 2019-08-26 | | | |
| | | Azorult | ['PuffStealer', 'Rultazo'] | win.azorult | ['The Gorgon Group'] | 2023-01-31 | | | |
| | | Azov Wiper | [] | win.azov_wiper | [] | 2023-01-25 | | | |
| | | B1txor20 | [] | elf.b1txor20 | [] | 2022-03-17 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | Babuk | [] | elf.babuk | [] | 2022-10-10 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2022-12-29 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2019-04-23 | | | |
| | | BABYMETAL | [] | win.babymetal | ['Anunak'] | 2022-06-27 | | | |
| | | BabyShark | [] | win.babyshark | ['Kimsuky'] | 2023-02-09 | | | |
| | | Bachosens | [] | win.bachosens | [] | 2023-03-16 | | | |
| | | BACKBEND | [] | win.backbend | ['APT 30'] | 2019-04-17 | | | |
| | | BackConfig | [] | win.backconfig | ['VICEROY TIGER'] | 2022-07-29 | | | |
| | | Backdoorit | ['backd00rit'] | elf.backdoorit | [] | 2022-07-15 | | | |
| | | BackNet | [] | win.backnet | [] | 2018-11-19 | | | |
| | | Backoff POS | [] | win.backoff | [] | 2021-01-29 | | | |
| | | backspace | ['Lecna', 'ZRLnk'] | win.backspace | ['APT 30'] | 2022-08-25 | | | |
| | | BackSwap | [] | win.backswap | [] | 2022-04-25 | | | |
| | | BADCALL | [] | apk.badcall | ['Lazarus Group'] | 2019-09-09 | | | |
| | | BADCALL | [] | win.badcall | ['Lazarus Group'] | 2022-11-28 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | ['Leviathan'] | 2019-03-25 | | | |
| | | BADHATCH | [] | win.badhatch | ['FIN8'] | 2021-12-15 | | | |
| | | BadNews | [] | win.badnews | ['Dropping Elephant'] | 2022-11-28 | | | |
| | | BadPatch | ['WelcomeChat'] | apk.badpatch | ['Molerats'] | 2020-07-15 | | | |
| | | Bagle | [] | win.bagle | [] | 2021-12-31 | | | |
| | | Bahamut | [] | apk.bahamut | ['Bahamut', 'Dropping Elephant'] | 2022-11-25 | | | |
| | | Bahamut | [] | win.bahamut | [] | 2020-10-08 | | | |
| | | Baldr | ['Baldir'] | win.baldr | [] | 2019-08-07 | | | |
| | | BalkanDoor | [] | win.balkan_door | [] | 2019-09-03 | | | |
| | | BalkanRAT | [] | win.balkan_rat | [] | 2019-09-09 | | | |
| | | Bamital | [] | win.bamital | [] | 2019-10-21 | | | |
| | | Banatrix | [] | win.banatrix | [] | 2017-05-22 | | | |
| | | bancos | [] | win.bancos | [] | 2021-12-31 | | | |
| | | Bandook | ['Bandok'] | win.bandook | ['Dark Caracal'] | 2023-02-21 | | | |
| | | bangat | [] | win.bangat | ['Comment Crew'] | 2018-09-11 | | | |
| | | Banjori | ['MultiBanker 2', 'BankPatch', 'BackPatcher'] | win.banjori | [] | 2018-07-31 | | | |
| | | Bankshot | ['COPPERHEDGE'] | win.bankshot | ['Lazarus Group'] | 2022-09-26 | | | |
| | | Banload | [] | jar.banload | [] | 2022-06-09 | | | |
| | | Barb(ie) Downloader | [] | win.barbie | ['AridViper'] | 2022-06-27 | | | |
| | | BarbWire | [] | win.barbwire | ['AridViper'] | 2022-06-27 | | | |
| | | barkiofork | [] | win.barkiofork | [] | 2021-01-25 | | | |
| | | Bart | [] | win.bart | [] | 2022-02-14 | | | |
| | | Basbanke | [] | apk.basbanke | [] | 2021-04-14 | | | |
| | | Bashlite | ['gayfgt', 'Gafgyt', 'qbot', 'torlus', 'lizkebab'] | elf.bashlite | [] | 2022-11-09 | | | |
| | | BatchWiper | [] | win.batchwiper | [] | 2021-10-05 | | | |
| | | Batel | [] | win.batel | [] | 2020-04-21 | | | |
| | | Bateleur | [] | js.bateleur | ['Anunak'] | 2022-05-05 | | | |
| | | BATLOADER | [] | win.bat_loader | [] | 2023-03-13 | | | |
| | | BazarBackdoor | ['BEERBOT', 'KEGTAP', 'Team9Backdoor', 'bazaloader', 'bazarloader'] | win.bazarbackdoor | ['UNC1878'] | 2023-02-21 | | | |
| | | BazarNimrod | ['NimzaLoader'] | win.bazarnimrod | [] | 2021-07-27 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2022-12-01 | | | |
| | | BBtok | [] | win.bbtok | [] | 2020-11-25 | | | |
| | | BCMPUPnP_Hunter | [] | elf.bcmpupnp_hunter | [] | 2018-11-19 | | | |
| | | Beapy | [] | win.beapy | [] | 2019-04-29 | | | |
| | | BEATDROP | [] | win.beatdrop | ['APT29'] | 2023-03-14 | | | |
| | | Bedep | [] | win.bedep | [] | 2022-09-20 | | | |
| | | Bee | [] | win.bee | [] | 2021-01-29 | | | |
| | | beendoor | [] | win.beendoor | ['Operation C-Major'] | 2019-04-08 | | | |
| | | BeepService | [] | win.beepservice | [] | 2020-05-27 | | | |
| | | Behinder | [] | php.behinder | [] | 2023-02-22 | | | |
| | | Bella | [] | osx.bella | [] | 2022-03-23 | | | |
| | | BELLHOP | [] | js.bellhop | ['Anunak'] | 2022-05-05 | | | |
| | | Belonard | [] | win.belonard | [] | 2019-03-12 | | | |
| | | Berbomthum | [] | win.berbomthum | [] | 2018-12-19 | | | |
| | | BernhardPOS | [] | win.bernhardpos | [] | 2022-09-19 | | | |
| | | BestKorea | [] | win.bestkorea | [] | 2020-03-13 | | | |
| | | BetaBot | ['Neurevt'] | win.betabot | [] | 2022-08-28 | | | |
| | | Bezigate | [] | win.bezigate | ['Operation C-Major'] | 2019-04-08 | | | |
| | | BfBot | [] | win.bfbot | [] | 2017-04-29 | | | |
| | | BHunt | [] | win.bhunt | [] | 2022-02-26 | | | |
| | | BianLian | ['Hydra'] | apk.bianlian | [] | 2022-11-11 | | | |
| | | BianLian | [] | elf.bianlian | [] | 2022-10-24 | | | |
| | | BianLian | [] | win.bianlian | [] | 2022-10-24 | | | |
| | | bifrose | [] | win.bifrose | ['BlackTech'] | 2021-01-29 | | | |
| | | Bifrost | ['elf.bifrose'] | elf.bifrost | ['BlackTech'] | 2023-02-06 | | | |
| | | BigViktor | [] | elf.bigviktor | [] | 2020-07-15 | | | |
| | | BillGates | [] | win.billgates | [] | 2022-03-07 | | | |
| | | Binanen | [] | win.binanen | [] | 2020-05-23 | | | |
| | | BioData | [] | win.biodata | [] | 2022-01-03 | | | |
| | | bioload | [] | win.bioload | ['Anunak'] | 2021-01-25 | | | |
| | | BIOPASS | [] | win.biopass | ['APT41'] | 2022-07-25 | | | |
| | | BioSet | [] | elf.bioset | [] | 2021-08-11 | | | |
| | | Biscuit | ['zxdosml'] | win.biscuit | ['Comment Crew'] | 2018-02-10 | | | |
| | | BISTROMATH | [] | win.bistromath | ['Lazarus Group'] | 2021-11-03 | | | |
| | | BitPyLock | [] | win.bitpylock | [] | 2020-01-22 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2023-01-04 | | | |
| | | Bitsran | ['SHADYCAT'] | win.bitsran | ['Lazarus Group'] | 2019-08-26 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2022-07-13 | | | |
| | | Bizzaro | [] | win.bizarro | [] | 2022-11-15 | | | |
| | | BI_D Ransomware | [] | win.bid_ransomware | [] | 2019-08-12 | | | |
| | | BKA Trojaner | ['bwin3_bka'] | win.bka_trojaner | [] | 2018-05-28 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2023-02-21 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | [] | 2023-02-21 | | | |
| | | BlackByte | [] | win.blackbyte | [] | 2022-10-24 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | [] | 2023-03-22 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | [] | 2023-03-22 | | | |
| | | BLACKCOFFEE | ['PNGRAT', 'gresim', 'ZoxPNG'] | win.blackcoffee | ['APT41', 'Aurora Panda', 'Leviathan'] | 2022-08-30 | | | |
| | | BlackEnergy | [] | win.blackenergy | ['Sandworm'] | 2022-12-01 | | | |
| | | BlackGuard | [] | win.blackguard | [] | 2022-08-17 | | | |
| | | BlackKingdom Ransomware | [] | win.blackkingdom_ransomware | [] | 2022-03-18 | | | |
| | | BlackLotus | [] | win.blacklotus | [] | 2023-03-20 | | | |
| | | BlackMagic | [] | win.blackmagic | [] | 2022-12-08 | | | |
| | | BlackMatter | [] | elf.blackmatter | [] | 2022-10-10 | | | |
| | | BlackMatter | [] | win.blackmatter | [] | 2022-09-26 | | | |
| | | BlackNET RAT | [] | win.blacknet_rat | [] | 2022-01-12 | | | |
| | | BlackNix RAT | [] | win.blacknix_rat | [] | 2021-02-18 | | | |
| | | BlackPOS | ['Kaptoxa', 'MMon', 'POSWDS', 'Reedum'] | win.blackpos | [] | 2020-10-05 | | | |
| | | BlackRemote | ['BlackRAT'] | win.blackremote | [] | 2020-05-18 | | | |
| | | BlackRevolution | [] | win.blackrevolution | [] | 2016-05-31 | | | |
| | | Blackrota | [] | elf.blackrota | [] | 2020-12-26 | | | |
| | | BlackRouter | ['BLACKHEART'] | win.blackrouter | [] | 2019-01-23 | | | |
| | | Blackruby | [] | win.blackruby | [] | 2019-08-14 | | | |
| | | BlackShades | [] | win.blackshades | [] | 2020-05-23 | | | |
| | | BlackSnake | [] | win.blacksnake | [] | 2023-03-13 | | | |
| | | BlackSoul | [] | win.blacksoul | [] | 2021-01-10 | | | |
| | | BlackSun | [] | ps1.blacksun | [] | 2022-02-02 | | | |
| | | Blackworm RAT | [] | win.blackworm_rat | [] | 2019-08-28 | | | |
| | | BleachGap | [] | win.bleachgap | [] | 2022-08-28 | | | |
| | | BLINDINGCAN | ['DRATzarus RAT'] | win.blindingcan | ['Lazarus Group'] | 2022-12-29 | | | |
| | | BLINDTOAD | [] | win.blindtoad | ['Lazarus Group'] | 2023-02-21 | | | |
| | | Blister | ['COLORFAKE'] | win.blister | [] | 2023-02-06 | | | |
| | | BloodyStealer | [] | win.bloodystealer | [] | 2021-10-05 | | | |
| | | Blue Banana RAT | [] | jar.bluebanana | [] | 2020-10-13 | | | |
| | | BlueFox | [] | win.bluefox | [] | 2022-12-05 | | | |
| | | BLUEHAZE | [] | win.bluehaze | [] | 2022-12-02 | | | |
| | | BlueSky | [] | win.bluesky | [] | 2022-10-24 | | | |
| | | BLUETHER | ['CAPGELD'] | win.bluether | ['BlackTech'] | 2021-01-25 | | | |
| | | BluStealer | ['a310logger'] | win.blustealer | [] | 2022-06-09 | | | |
| | | BOATLAUNCH | [] | win.boatlaunch | ['FIN7'] | 2022-04-07 | | | |
| | | Boaxxe | [] | win.boaxxe | [] | 2018-03-26 | | | |
| | | Bobik | [] | win.bobik | [] | 2023-02-17 | | | |
| | | Bohmini | [] | win.bohmini | [] | 2018-07-24 | | | |
| | | BOLDMOVE | [] | elf.boldmove | [] | 2023-01-20 | | | |
| | | BOLDMOVE | [] | win.boldmove | [] | 2023-01-20 | | | |
| | | Bolek | ['KBOT'] | win.bolek | [] | 2020-04-06 | | | |
| | | BONDUPDATER | ['Poison Frog', 'Glimpse'] | ps1.bondupdater | ['OilRig', 'APT34'] | 2021-06-29 | | | |
| | | Book of Eli | [] | win.bookofeli | [] | 2022-02-14 | | | |
| | | Bookworm | [] | win.bookworm | [] | 2022-09-19 | | | |
| | | BOOMBOX | [] | win.boombox | ['APT29'] | 2022-11-22 | | | |
| | | BOOSTWRITE | [] | win.boostwrite | ['Anunak'] | 2022-05-05 | | | |
| | | BOOTWRECK | ['MBRkiller'] | win.bootwreck | ['Lazarus Group'] | 2019-10-12 | | | |
| | | Borat RAT | [] | win.boratrat | [] | 2022-05-08 | | | |
| | | Borr | [] | win.borr | [] | 2020-02-13 | | | |
| | | BotenaGo | [] | elf.botenago | [] | 2023-01-19 | | | |
| | | Bouncer | [] | win.bouncer | ['Comment Crew'] | 2018-02-10 | | | |
| | | BoxCaon | [] | win.boxcaon | [] | 2022-10-25 | | | |
| | | Bozok | [] | win.bozok | ['Operation C-Major', 'Temper Panda'] | 2021-04-29 | | | |
| | | BPFDoor | ['JustForFun'] | elf.bpfdoor | ['Red Menshen'] | 2022-08-02 | | | |
| | | BRAIN | [] | win.brain | [] | 2019-03-07 | | | |
| | | Brambul | ['SORRYBRUTE'] | win.brambul | ['Lazarus Group'] | 2022-03-02 | | | |
| | | BrasDex | [] | apk.brasdex | [] | 2022-12-19 | | | |
| | | BRATA | ['AmexTroll'] | apk.brata | [] | 2022-09-13 | | | |
| | | BravoNC | [] | win.bravonc | ['Lazarus Group'] | 2017-05-23 | | | |
| | | BrbBot | [] | win.brbbot | [] | 2022-02-09 | | | |
| | | BreachRAT | [] | win.breach_rat | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Break out the Box | ['BOtB'] | elf.botb | [] | 2021-01-21 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2022-01-28 | | | |
| | | BrickerBot | [] | py.brickerbot | [] | 2018-01-12 | | | |
| | | BrittleBush | [] | win.brittle_bush | ['Molerats'] | 2022-02-09 | | | |
| | | BROKEYOLK | [] | win.brokeyolk | [] | 2023-02-16 | | | |
| | | BROLER | ['down_new'] | win.broler | ['Tick'] | 2020-06-02 | | | |
| | | Bruh Wiper | [] | win.bruh_wiper | [] | 2023-01-25 | | | |
| | | Brunhilda | [] | apk.brunhilda | [] | 2022-11-06 | | | |
| | | BrushaLoader | [] | win.brushaloader | [] | 2019-11-20 | | | |
| | | Brute Ratel C4 | [] | win.brute_ratel_c4 | [] | 2023-03-20 | | | |
| | | brute_ratel | [] | elf.brute_ratel | [] | 2022-09-30 | | | |
| | | BrutPOS | [] | win.brutpos | [] | 2018-04-23 | | | |
| | | BS2005 | [] | win.bs2005 | ['Mirage'] | 2021-04-29 | | | |
| | | BTCWare | [] | win.btcware | [] | 2017-09-14 | | | |
| | | BUBBLEWRAP | [] | win.bubblewrap | ['Temper Panda'] | 2019-04-12 | | | |
| | | Buer | ['Buerloader', 'RustyBuer'] | win.buer | [] | 2023-01-31 | | | |
| | | BUFFETLINE | [] | win.buffetline | ['Lazarus Group'] | 2020-02-27 | | | |
| | | BUGHATCH | [] | win.bughatch | [] | 2022-09-13 | | | |
| | | Buhtrap | ['Ratopak'] | win.buhtrap | ['BuhTrap'] | 2021-02-06 | | | |
| | | BumbleBee | ['SHELLSTING'] | win.bumblebee | [] | 2023-03-13 | | | |
| | | Bundestrojaner | ['R2D2', '0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | Bundlore | ['SurfBuyer'] | osx.bundlore | [] | 2021-06-23 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2021-04-12 | | | |
| | | BusyGasper | [] | apk.busygasper | [] | 2018-11-16 | | | |
| | | Buterat | ['spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | Buzus | ['Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | Bvp47 | [] | elf.bvp47 | ['Equation Group'] | 2022-09-19 | | | |
| | | BYEBY | [] | win.byeby | ['Calypso group', 'Karma Panda'] | 2022-07-25 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | c99shell | ['c99'] | php.c99 | [] | 2020-01-13 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | CACTUSTORCH | [] | js.cactustorch | ['APT32', 'Leviathan'] | 2022-01-25 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28'] | 2023-03-20 | | | |
| | | CadelSpy | ['Cadelle'] | win.cadelspy | [] | 2020-04-21 | | | |
| | | CageyChameleon | ['Cabbage RAT'] | vbs.cageychameleon | [] | 2023-01-25 | | | |
| | | Caja | [] | elf.caja | ['APT32'] | 2022-11-15 | | | |
| | | Caligula | [] | elf.caligula | [] | 2022-07-15 | | | |
| | | CALMTHORN | [] | win.calmthorn | ['Tonto Team'] | 2021-02-09 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2022-02-02 | | | |
| | | campoloader | [] | win.campoloader | [] | 2021-08-06 | | | |
| | | CamuBot | [] | win.camubot | [] | 2018-09-07 | | | |
| | | Cannibal Rat | [] | win.cannibal_rat | [] | 2018-03-17 | | | |
| | | Cannon | [] | win.cannon | ['APT28'] | 2022-07-29 | | | |
| | | Capoae | [] | elf.capoae | [] | 2021-09-19 | | | |
| | | CapraRAT | [] | apk.capra_rat | ['Operation C-Major'] | 2023-03-13 | | | |
| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2023-01-05 | | | |
| | | Carberp | [] | win.carberp | [] | 2022-12-01 | | | |
| | | CarbonSteal | [] | apk.carbonsteal | ['HenBox'] | 2020-07-15 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2022-12-01 | | | |
| | | Careto | ['Mask', 'Appetite'] | osx.careto | [] | 2017-08-22 | | | |
| | | CargoBay | [] | win.cargobay | [] | 2023-02-27 | | | |
| | | CARROTBALL | [] | win.carrotball | [] | 2020-02-04 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2020-01-26 | | | |
| | | CASHY200 | [] | ps1.cashy200 | [] | 2022-07-25 | | | |
| | | Casper | [] | win.casper | ['SNOWGLOBE'] | 2018-01-17 | | | |
| | | Casso | [] | osx.casso | ['Lazarus Group'] | 2020-07-30 | | | |
| | | CatB | [] | win.catb | [] | 2023-03-15 | | | |
| | | Catchamas | [] | win.catchamas | ['Thrip'] | 2018-06-25 | | | |
| | | Catelites | [] | apk.catelites | [] | 2017-12-30 | | | |
| | | CCleaner Backdoor | ['DIRTCLEANER'] | win.ccleaner_backdoor | [] | 2022-11-18 | | | |
| | | CDDS | ['Macma'] | osx.cdds | [] | 2021-11-17 | | | |
| | | CDorked | ['CDorked.A'] | elf.cdorked | [] | 2018-07-23 | | | |
| | | CDRThief | [] | elf.cdrthief | [] | 2020-09-15 | | | |
| | | CEELOADER | [] | win.ceeloader | ['UNC2452'] | 2023-02-21 | | | |
| | | CenterPOS | ['cerebrus'] | win.centerpos | [] | 2018-04-23 | | | |
| | | Cephei | [] | elf.cephei | [] | 2021-01-11 | | | |
| | | Cerber | [] | win.cerber | [] | 2023-01-31 | | | |
| | | Cerberus | [] | apk.cerberus | [] | 2022-12-07 | | | |
| | | Cerbu | [] | win.cerbu_miner | [] | 2018-10-18 | | | |
| | | CetaRAT | [] | win.ceta_rat | [] | 2022-01-25 | | | |
| | | Cetus | [] | elf.cetus | [] | 2020-08-31 | | | |
| | | ChaChi | [] | win.chachi | [] | 2022-01-31 | | | |
| | | Chaes | [] | win.chaes | [] | 2022-02-19 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2021-07-20 | | | |
| | | CHAIRSMACK | [] | win.chairsmack | ['Charming Kitten'] | 2020-03-03 | | | |
| | | Chamois | [] | apk.chamois | [] | 2019-09-24 | | | |
| | | Chaos | [] | elf.chaos | [] | 2022-12-14 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2022-08-05 | | | |
| | | Chaperone | ['Taj Mahal'] | win.chaperone | [] | 2020-08-13 | | | |
| | | Chapro | [] | elf.chapro | [] | 2018-06-28 | | | |
| | | Charger | [] | apk.charger | [] | 2022-11-18 | | | |
| | | CHCH | [] | win.chch | [] | 2019-12-18 | | | |
| | | ChChes | ['HAYMAKER', 'Ham Backdoor'] | win.chches | ['Stone Panda'] | 2020-05-23 | | | |
| | | CHEESETRAY | ['CROWDEDFLOUNDER'] | win.cheesetray | ['Lazarus Group'] | 2020-02-27 | | | |
| | | Chernolocker | [] | win.chernolocker | [] | 2020-01-26 | | | |
| | | CherryPicker POS | ['cherrypickerpos', 'cherrypicker', 'cherry_picker'] | win.cherry_picker | [] | 2022-12-01 | | | |
| | | ChewBacca | [] | win.chewbacca | [] | 2018-04-26 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | ['APT41', 'EMISSARY PANDA', 'GALLIUM', 'HAFNIUM', 'Hurricane Panda', 'Leviathan'] | 2022-09-30 | | | |
| | | Chinad | [] | win.chinad | [] | 2018-06-19 | | | |
| | | ChinaJm | [] | win.chinajm | [] | 2020-08-05 | | | |
| | | Chinotto | [] | apk.chinotto | ['APT37'] | 2021-12-07 | | | |
| | | Chinotto | [] | win.chinotto | ['APT37'] | 2023-03-20 | | | |
| | | Chinoxy | [] | win.chinoxy | [] | 2022-08-28 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | Chisel | [] | elf.chisel | [] | 2022-04-25 | | | |
| | | Chisel | [] | win.chisel | [] | 2022-09-15 | | | |
| | | ChiserClient | [] | win.chiser_client | ['Pirate Panda'] | 2022-03-30 | | | |
| | | Choziosi | ['ChromeLoader', 'Chropex'] | osx.choziosi | [] | 2023-03-21 | | | |
| | | Choziosi | ['ChromeLoader'] | win.choziosi | [] | 2023-03-21 | | | |
| | | ChromeBack | [] | js.chromeback | [] | 2022-07-13 | | | |
| | | Chrysaor | ['Pegasus', 'JigglyPuff'] | apk.chrysaor | [] | 2022-11-01 | | | |
| | | Chthonic | ['AndroKINS'] | win.chthonic | [] | 2021-09-19 | | | |
| | | cifty | [] | win.cifty | [] | 2021-01-25 | | | |
| | | Cinobi | [] | win.cinobi | [] | 2021-08-09 | | | |
| | | Citadel | [] | win.citadel | [] | 2021-06-29 | | | |
| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | CLEANTOAD | [] | win.cleantoad | ['Lazarus Group'] | 2019-11-13 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clientor | [] | apk.clientor | [] | 2018-09-19 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2022-06-30 | | | |
| | | Clipper | [] | apk.clipper | [] | 2019-02-13 | | | |
| | | Clop | ['Cl0p'] | elf.clop | [] | 2023-02-09 | | | |
| | | Clop | [] | win.clop | ['TA505'] | 2023-01-19 | | | |
| | | Cloud Snooper | ['Snoopy'] | elf.cloud_snooper | [] | 2022-01-28 | | | |
| | | CloudAtlas | [] | apk.cloudatlas | ['Inception Framework'] | 2020-05-18 | | | |
| | | CLOUDBURST | [] | win.cloudburst | [] | 2023-03-13 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2023-03-20 | | | |
| | | CloudMensis | [] | osx.cloud_mensis | [] | 2022-07-20 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | ['meciv'] | win.cmstar | [] | 2022-07-25 | | | |
| | | CoalaBot | [] | win.coalabot | [] | 2022-08-28 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2023-03-20 | | | |
| | | CobaltMirage FRP | [] | win.cobaltmirage_tunnel | [] | 2022-07-13 | | | |
| | | Cobian RAT | [] | win.cobian_rat | [] | 2022-12-01 | | | |
| | | CobInt | ['COOLPANTS'] | win.cobint | ['Cobalt'] | 2020-07-24 | | | |
| | | Cobra Carbon System | ['Carbon'] | win.cobra | ['Turla'] | 2023-01-10 | | | |
| | | CockBlocker | [] | win.cockblocker | [] | 2017-01-10 | | | |
| | | CodeCore | [] | win.code_core | [] | 2022-07-13 | | | |
| | | CodeKey | [] | win.codekey | [] | 2017-02-20 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2018-04-23 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2022-09-19 | | | |
| | | CoinThief | [] | osx.cointhief | [] | 2019-09-12 | | | |
| | | Cold$eal | ['ColdSeal'] | win.coldseal | [] | 2020-11-26 | | | |
| | | coldbrew | [] | win.coldbrew | [] | 2022-02-01 | | | |
| | | ColdLock | [] | win.coldlock | ['APT41'] | 2021-06-09 | | | |
| | | Coldroot RAT | [] | osx.coldroot_rat | [] | 2019-07-11 | | | |
| | | ColdStealer | [] | win.coldstealer | [] | 2023-02-06 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2022-12-02 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combojack | [] | win.combojack | [] | 2018-03-12 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2021-02-02 | | | |
| | | CometBot | [] | apk.comet_bot | [] | 2019-03-07 | | | |
| | | Comfoo | [] | win.comfoo | [] | 2021-01-27 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2022-01-28 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-03-21 | | | |
| | | ComodoSec | [] | win.comodosec | [] | 2021-03-19 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | ComradeCircle | [] | win.comrade_circle | [] | 2017-02-15 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2021-08-23 | | | |
| | | Connic | ['SpyBanker'] | apk.connic | [] | 2017-12-14 | | | |
| | | Conti | ['Conti Locker'] | elf.conti | [] | 2022-10-10 | | | |
| | | Conti | [] | win.conti | [] | 2023-03-13 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2020-04-21 | | | |
| | | Convuster | [] | osx.convuster | [] | 2021-04-16 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2022-12-07 | | | |
| | | CopperStealer | ['Mingloa'] | win.copper_stealer | [] | 2022-11-15 | | | |
| | | Corebot | [] | win.corebot | [] | 2021-05-31 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2021-12-01 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | Corona DDOS Bot | [] | elf.corona | [] | 2021-11-03 | | | |
| | | Coronavirus Android Worm | [] | apk.corona_worm | [] | 2020-03-27 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2022-09-20 | | | |
| | | Cotx RAT | [] | win.cotx | ['TA428'] | 2022-08-11 | | | |
| | | Cova | [] | win.cova | [] | 2022-12-07 | | | |
| | | Covicli | ['Covically'] | win.covicli | ['MuddyWater'] | 2021-08-17 | | | |
| | | Covid22 | [] | win.covid22 | [] | 2021-11-17 | | | |
| | | CoViper | [] | win.coviper | [] | 2022-11-15 | | | |
| | | COZYDUKE | ['CozyCar', 'Cozer', 'CozyBear', 'EuroAPT'] | win.cozyduke | ['APT29'] | 2022-12-01 | | | |
| | | CpuMeaner | [] | osx.cpumeaner | [] | 2017-12-15 | | | |
| | | Cpuminer | [] | apk.cpuminer | [] | 2017-11-08 | | | |
| | | Cpuminer | [] | elf.cpuminer | [] | 2021-06-16 | | | |
| | | Cr1ptT0r | ['CriptTor'] | elf.cr1ptt0r | [] | 2019-03-20 | | | |
| | | crackshot | [] | win.crackshot | ['APT41'] | 2019-08-13 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CRAT | [] | win.crat | ['Lazarus Group'] | 2021-04-06 | | | |
| | | CREAMSICLE | [] | win.creamsicle | ['APT 30'] | 2019-04-17 | | | |
| | | CreativeUpdater | [] | osx.creative_updater | [] | 2018-02-07 | | | |
| | | CredoMap | [] | win.credomap | ['APT28'] | 2022-09-29 | | | |
| | | Credraptor | [] | win.credraptor | ['TeleBots'] | 2021-03-04 | | | |
| | | CreepExfil | [] | win.creep_exfil | ['POLONIUM'] | 2022-12-12 | | | |
| | | CreepySnail | [] | win.creepysnail | ['POLONIUM'] | 2022-12-12 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |
| | | Crimson RAT | ['SEEDOOR', 'Scarimson'] | win.crimson | ['Operation C-Major'] | 2022-07-15 | | | |
| | | CrimsonIAS | [] | win.crimsonias | ['Mustang Panda'] | 2021-02-02 | | | |
| | | Cring | [] | win.cring | [] | 2022-03-18 | | | |
| | | Crisis | [] | osx.crisis | [] | 2018-06-28 | | | |
| | | CronRAT | [] | elf.cronrat | [] | 2021-11-29 | | | |
| | | CrossRAT | ['Trupto'] | jar.crossrat | ['Dark Caracal'] | 2020-06-08 | | | |
| | | Crossrider | [] | osx.crossrider | [] | 2018-05-11 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2022-08-08 | | | |
| | | Crutch | [] | win.crutch | ['Turla'] | 2021-05-03 | | | |
| | | Cryakl | ['CryLock'] | win.cryakl | [] | 2023-03-20 | | | |
| | | CryCryptor | ['CryCrypter', 'CryDroid'] | apk.crycryptor | [] | 2020-06-24 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2023-01-27 | | | |
| | | CrypticConvo | [] | win.cryptic_convo | ['Scarlet Mimic'] | 2020-01-26 | | | |
| | | CryptoDarkRubix | ['Ranet'] | win.cryptodarkrubix | [] | 2020-07-30 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2018-02-10 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2021-09-19 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |
| | | CryptoMix | ['Azer', 'CryptFile2'] | win.cryptomix | [] | 2023-02-06 | | | |
| | | CryptoNight | [] | js.cryptonight | [] | 2018-04-24 | | | |
| | | CryptoPatronum | [] | win.cryptopatronum | [] | 2020-02-03 | | | |
| | | CryptoRansomeware | [] | win.crypto_ransomeware | [] | 2017-02-15 | | | |
| | | Cryptorium | [] | win.cryptorium | [] | | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2020-12-03 | | | |
| | | CryptoWire | [] | win.cryptowire | [] | 2018-06-13 | | | |
| | | CryptXXXX | [] | win.cryptxxxx | [] | 2020-12-20 | | | |
| | | Crytox | [] | win.crytox | [] | 2022-09-30 | | | |
| | | CsExt | [] | win.csext | ['Cleaver'] | 2017-05-21 | | | |
| | | CTB Locker | [] | win.ctb_locker | [] | 2021-09-12 | | | |
| | | Cuba | ['COLDDRAW'] | win.cuba | [] | 2022-12-02 | | | |
| | | Cuegoe | [] | win.cuegoe | ['APT32'] | 2017-05-19 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | CukieGrab | ['Roblox Trade Assist'] | js.cukiegrab_crx | [] | 2017-09-14 | | | |
| | | Curator | ['Ever101', 'SunnyDay'] | win.curator | [] | 2023-01-05 | | | |
| | | Cursed Murderer | [] | win.cursed_murderer | [] | 2020-02-10 | | | |
| | | Cutlet | [] | win.cutlet | [] | 2022-04-25 | | | |
| | | Cutwail | [] | win.cutwail | ['NARWHAL SPIDER'] | 2022-02-14 | | | |
| | | CyberAzov | [] | apk.cyber_azov | ['Turla'] | 2022-08-05 | | | |
| | | CyberGate | ['Rebhip'] | win.cybergate | [] | 2023-02-17 | | | |
| | | CyberSplitter | [] | win.cyber_splitter | [] | 2016-12-27 | | | |
| | | CycBot | [] | win.cycbot | [] | 2018-01-19 | | | |
| | | CyclopsBlink | [] | elf.cyclops_blink | [] | 2022-12-12 | | | |
| | | Cyrat | [] | win.cyrat | [] | 2020-09-01 | | | |
| | | cysxl | [] | win.cysxl | [] | 2021-01-25 | | | |
| | | Dacls | [] | elf.dacls | [] | 2021-03-04 | | | |
| | | Dacls | [] | osx.dacls | ['Lazarus Group'] | 2021-03-25 | | | |
| | | Dacls | ['MATA'] | win.dacls | ['Lazarus Group'] | 2022-11-28 | | | |
| | | DADJOKE | [] | win.dadjoke | ['Leviathan'] | 2020-02-09 | | | |
| | | DADSTACHE | [] | win.dadstache | ['Leviathan'] | 2020-07-11 | | | |
| | | Dairy | [] | win.dairy | ['Comment Crew'] | 2018-02-10 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2023-02-06 | | | |
| | | danbot | [] | win.danbot | [] | 2022-02-14 | | | |
| | | Dark | ['Dark.IoT'] | elf.dark | [] | 2022-06-15 | | | |
| | | Dark Nexus | [] | elf.darknexus | [] | 2022-01-05 | | | |
| | | Dark Shades | ['Rogue'] | apk.darkshades | [] | 2020-05-05 | | | |
| | | DarkBit | [] | win.darkbit | [] | 2023-02-17 | | | |
| | | DarkCloud Stealer | [] | win.darkcloud | [] | 2023-01-25 | | | |
| | | DarkComet | ['Breut', 'Fynloski', 'klovbot'] | win.darkcomet | ['APT33', 'Lazarus Group', 'Operation C-Major'] | 2023-02-27 | | | |
| | | DARKDEW | [] | win.darkdew | [] | 2022-12-02 | | | |
| | | DarkEye | [] | win.darkeye | [] | 2022-09-07 | | | |
| | | DarkHotel | [] | win.dubnium_darkhotel | ['DarkHotel'] | 2020-03-26 | | | |
| | | DarkIRC | [] | win.darkirc | [] | 2021-03-31 | | | |
| | | DarkLoader | [] | win.darkloader | [] | 2021-12-22 | | | |
| | | DarkMe | [] | win.darkme | [] | 2022-08-08 | | | |
| | | DarkMegi | [] | win.darkmegi | [] | 2018-06-28 | | | |
| | | Darkmoon | ['Chymine'] | win.darkmoon | [] | 2018-06-28 | | | |
| | | DarkPulsar | [] | win.darkpulsar | ['Equation Group'] | 2017-05-01 | | | |
| | | DarkRadiation | [] | elf.dark_radiation | [] | 2021-06-23 | | | |
| | | DarkRat | [] | win.darkrat | [] | 2022-04-15 | | | |
| | | DarkShell | [] | win.darkshell | [] | 2022-07-01 | | | |
| | | DarkSide | [] | elf.darkside | [] | 2022-10-10 | | | |
| | | DarkSide | ['BlackMatter'] | win.darkside | [] | 2022-09-26 | | | |
| | | Darksky | [] | win.darksky | [] | 2018-03-27 | | | |
| | | DarkStRat | [] | win.darkstrat | [] | 2018-09-11 | | | |
| | | DarkTequila | [] | win.darktequila | [] | 2018-08-31 | | | |
| | | DarkTortilla | [] | win.darktortilla | [] | 2023-01-05 | | | |
| | | Darktrack RAT | [] | win.darktrack_rat | [] | 2021-03-12 | | | |
| | | DarkVNC | [] | win.darkvnc | [] | 2022-08-15 | | | |
| | | DarkWatchman | [] | js.darkwatchman | [] | 2022-05-04 | | | |
| | | DarthMiner | [] | osx.darthminer | [] | 2018-12-19 | | | |
| | | Daserf | ['Muirim', 'Nioupale'] | win.daserf | ['Tick'] | 2020-05-23 | | | |
| | | DataExfiltrator | ['FileSender'] | win.data_exfiltrator | [] | 2021-07-21 | | | |
| | | Datper | [] | win.datper | ['Tick'] | 2021-03-02 | | | |
| | | DawDropper | [] | apk.dawdropper | [] | 2022-08-12 | | | |
| | | Daxin | [] | win.daxin | [] | 2023-02-01 | | | |
| | | DazzleSpy | [] | osx.dazzle_spy | [] | 2022-02-07 | | | |
| | | DBatLoader | ['ModiLoader', 'NatsoLoader'] | win.dbatloader | [] | 2021-12-31 | | | |
| | | DBoxAgent | [] | win.dboxagent | ['APT41'] | 2022-11-18 | | | |
| | | DcDcrypt | [] | win.dcdcrypt | [] | 2022-09-30 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2023-03-13 | | | |
| | | DCSrv | ['DCrSrv'] | win.dcsrv | [] | 2021-11-17 | | | |
| | | DDG | [] | elf.ddg | [] | 2021-09-28 | | | |
| | | DDKeylogger | [] | win.ddkeylogger | [] | 2020-05-27 | | | |
| | | DDKONG | [] | win.ddkong | ['RANCOR'] | 2022-07-29 | | | |
| | | ddoor | [] | elf.ddoor | [] | 2020-03-13 | | | |
| | | DEADBOLT | [] | elf.deadbolt | [] | 2022-06-09 | | | |
| | | DEADWOOD | ['Agrius', 'SQLShred', 'DETBOSIT'] | win.deadwood | [] | 2023-01-19 | | | |
| | | DealPly | [] | win.dealply | [] | 2022-08-17 | | | |
| | | dearcry | ['DoejoCrypt'] | win.dearcry | [] | 2022-07-01 | | | |
| | | DeathRansom | ['deathransom', 'wacatac'] | win.deathransom | [] | 2020-03-27 | | | |
| | | DECAF | [] | win.decaf | [] | 2021-11-03 | | | |
| | | Decebal | [] | win.decebal | [] | 2018-04-26 | | | |
| | | DeepCreep | [] | win.deepcreep | ['POLONIUM'] | 2022-10-12 | | | |
| | | DeepRAT | [] | win.deep_rat | [] | 2021-07-26 | | | |
| | | DEFENSOR ID | ['Defensor Digital'] | apk.defensor_id | [] | 2020-07-30 | | | |
| | | Defray | ['Glushkov'] | win.defray | [] | 2021-02-09 | | | |
| | | Deimos | [] | win.deimos | [] | 2023-01-19 | | | |
| | | DeimosC2 | [] | win.deimos_c2 | [] | 2023-02-21 | | | |
| | | Delta(Alfa,Bravo, ...) | [] | win.deltas | ['Lazarus Group'] | 2017-07-12 | | | |
| | | Dendroid | [] | apk.dendroid | [] | 2020-05-20 | | | |
| | | Denonia | [] | elf.denonia | [] | 2022-08-08 | | | |
| | | Dented | [] | win.dented | [] | 2017-11-16 | | | |
| | | Deprimon | [] | win.deprimon | ['DePriMon'] | 2021-02-25 | | | |
| | | DeputyDog | [] | win.deputydog | ['Aurora Panda'] | 2020-06-08 | | | |
| | | DeriaLock | [] | win.deria_lock | [] | | | | |
| | | DeroHE | [] | win.derohe | [] | 2021-01-21 | | | |
| | | Derusbi | [] | elf.derusbi | [] | 2022-08-30 | | | |
| | | Derusbi | ['PHOTO'] | win.derusbi | ['APT41', 'Axiom', 'Leviathan', 'Stone Panda'] | 2022-08-30 | | | |
| | | DesertBlade | [] | win.desertblade | [] | 2023-03-20 | | | |
| | | Devil's Rat | [] | win.devils_rat | [] | 2017-09-18 | | | |
| | | DEWMODE | [] | php.dewmode | [] | 2022-04-15 | | | |
| | | Dexbia | ['CONIME'] | win.dexbia | ['Tonto Team'] | 2020-10-06 | | | |
| | | Dexphot | [] | win.dexphot | [] | 2019-12-04 | | | |
| | | Dexter | ['LusyPOS'] | win.dexter | [] | 2022-11-12 | | | |
| | | Dharma | ['Arena', 'Crysis', 'Wadhrama', 'ncov'] | win.dharma | [] | 2023-03-13 | | | |
| | | DiamondFox | ['Crystal', 'Gorynych', 'Gorynch'] | win.diamondfox | [] | 2022-08-28 | | | |
| | | Diavol | [] | win.diavol | [] | 2022-10-05 | | | |
| | | DILLJUICE | [] | win.dilljuice | ['Stone Panda'] | 2021-04-29 | | | |
| | | DilongTrash | [] | win.dilongtrash | ['Gamaredon Group'] | 2022-08-25 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DinoTrain | [] | win.dinotrain | ['Gamaredon Group'] | 2022-08-25 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | DirtyMoe | [] | win.dirtymoe | [] | 2022-03-29 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | ['Shamoon'] | win.disttrack | ['Shamoon', 'Magic Hound', 'Timberworm', 'COBALT GIPSY'] | 2023-01-19 | | | |
| | | Divergent | ['Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2019-04-02 | | | |
| | | dmsSpy | [] | apk.dmsspy | [] | 2020-03-27 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSMessenger | ['TEXTMATE'] | win.dnsmessenger | ['Anunak'] | 2022-05-05 | | | |
| | | DNSpionage | ['Agent Drable', 'AgentDrable', 'Webmask'] | win.dnspionage | ['DNSpionage'] | 2021-04-10 | | | |
| | | DNSRat | ['DNSbot'] | js.dnsrat | ['Anunak'] | 2020-02-27 | | | |
| | | dnWipe | [] | win.dnwipe | [] | 2022-11-21 | | | |
| | | Dockster | [] | osx.dockster | [] | 2018-06-28 | | | |
| | | doenerium | [] | js.doenerium | [] | 2022-09-30 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2022-07-01 | | | |
| | | DogHousePower | ['Shelma'] | win.doghousepower | [] | 2018-01-03 | | | |
| | | Dok | ['Retefe'] | osx.retefe | [] | 2019-05-02 | | | |
| | | Doki | [] | elf.doki | [] | 2021-01-29 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2022-12-01 | | | |
| | | DoorMe | [] | win.doorme | [] | 2023-03-21 | | | |
| | | DoppelDridex | [] | win.doppeldridex | ['DOPPEL SPIDER'] | 2022-04-25 | | | |
| | | DoppelPaymer | ['Pay OR Grief'] | win.doppelpaymer | ['DOPPEL SPIDER'] | 2023-03-17 | | | |
| | | Dorshel | [] | win.dorshel | ['Energetic Bear'] | 2020-04-21 | | | |
| | | Dosia | ['DDOSIA'] | win.dosia | ['NoName057(16)'] | 2023-02-17 | | | |
| | | DOSTEALER | [] | win.dostealer | [] | 2023-02-16 | | | |
| | | Dot Ransomware | ['MZP Ransomware'] | win.dot_ransomware | [] | 2020-03-27 | | | |
| | | DoubleAgent | [] | apk.doubleagent | ['HenBox'] | 2020-07-15 | | | |
| | | DOUBLEBACK | [] | win.doubleback | [] | 2021-05-19 | | | |
| | | DoubleFantasy | [] | elf.doublefantasy | ['Equation Group'] | 2020-10-05 | | | |
| | | DoubleFantasy | ['VALIDATOR'] | win.doublefantasy | ['Equation Group'] | 2022-05-23 | | | |
| | | DoubleLocker | [] | apk.doublelocker | [] | 2017-10-20 | | | |
| | | DoublePulsar | [] | win.doublepulsar | ['Equation Group', 'UPS'] | 2022-06-08 | | | |
| | | DoubleZero | ['FiberLake'] | win.doublezero | [] | 2023-03-20 | | | |
| | | Downdelph | ['DELPHACY'] | win.downdelph | ['APT28'] | 2021-04-20 | | | |
| | | Downeks | [] | win.downeks | [] | 2020-03-03 | | | |
| | | DownPaper | [] | win.downpaper | ['Charming Kitten'] | 2022-06-22 | | | |
| | | Dracarys | [] | apk.dracarys | ['HAZY TIGER'] | 2022-08-15 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DRATzarus | [] | win.dratzarus | ['Lazarus Group'] | 2021-02-02 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2022-08-28 | | | |
| | | Dridex | [] | win.dridex | ['Evil Corp', 'INDRIK SPIDER', 'TA505'] | 2022-12-29 | | | |
| | | DRIFTPIN | ['Toshliph', 'Spy.Agent.ORM'] | win.driftpin | ['Anunak'] | 2022-05-05 | | | |
| | | Dripion | ['Masson'] | win.dripion | [] | 2019-09-06 | | | |
| | | DriveOcean | ['Google Drive RAT'] | win.driveocean | ['APT28'] | 2021-01-11 | | | |
| | | DroidJack | [] | apk.droidjack | [] | 2021-02-04 | | | |
| | | DroidWatcher | [] | apk.droidwatcher | [] | 2021-11-17 | | | |
| | | Drokbk | [] | win.drokbk | ['APT35'] | 2023-01-03 | | | |
| | | DropBook | [] | win.dropbook | ['Molerats'] | 2022-02-09 | | | |
| | | DropboxC2C | [] | py.dropboxc2c | [] | 2020-03-06 | | | |
| | | DROPSHOT | [] | win.dropshot | ['APT33'] | 2018-06-25 | | | |
| | | Dtrack | ['TroyRAT'] | win.dtrack | ['Lazarus Group', 'Silent Chollima'] | 2023-02-09 | | | |
| | | DualToy | [] | apk.dualtoy | [] | 2017-02-15 | | | |
| | | DualToy | [] | ios.dualtoy | [] | 2017-02-15 | | | |
| | | DualToy | [] | win.dualtoy | [] | 2018-01-22 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | DUCKTAIL | [] | win.ducktail | [] | 2022-10-05 | | | |
| | | Dumador | [] | win.dumador | [] | 2018-07-24 | | | |
| | | Dummy | [] | osx.dummy | [] | 2018-07-06 | | | |
| | | DuQu | [] | win.duqu | ['Unit 8200'] | 2022-12-01 | | | |
| | | DUSTMAN | [] | win.dustman | [] | 2023-01-19 | | | |
| | | Duuzer | ['Escad'] | win.duuzer | ['Lazarus Group'] | 2020-12-08 | | | |
| | | Dvmap | [] | apk.dvmap | [] | 2020-02-26 | | | |
| | | DYEPACK | ['swift'] | win.dyepack | ['Lazarus Group'] | 2021-09-10 | | | |
| | | DynamicStealer | [] | win.dynamicstealer | [] | 2022-06-09 | | | |
| | | Dyre | ['Dyreza'] | win.dyre | ['WIZARD SPIDER'] | 2021-06-29 | | | |
| | | EagleMonitorRAT | [] | win.eagle_monitor_rat | [] | 2022-04-20 | | | |
| | | EASYNIGHT | [] | win.easynight | ['APT41'] | 2019-10-18 | | | |
| | | Ebury | [] | elf.ebury | [] | 2022-07-05 | | | |
| | | Echobot | [] | elf.echobot | [] | 2020-03-09 | | | |
| | | EDA2 | [] | win.eda2_ransom | [] | 2020-04-14 | | | |
| | | Egregor | [] | win.egregor | [] | 2022-05-03 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2017-09-14 | | | |
| | | Ekipa RAT | [] | win.ekipa | [] | 2023-01-05 | | | |
| | | El Machete APT Backdoor Dropper | [] | win.elmachete_dropper_2022 | ['El Machete'] | 2022-04-05 | | | |
| | | Eleanor | [] | osx.eleanor | [] | 2019-09-10 | | | |
| | | ELECTRICFISH | [] | win.electricfish | ['Lazarus Group'] | 2023-02-21 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | ElectroRAT | [] | osx.electro_rat | [] | 2021-07-27 | | | |
| | | elf.wellmess | [] | elf.wellmess | ['APT 29'] | 2021-12-31 | | | |
| | | Elibomi | ['Drinik'] | apk.elibomi | [] | 2021-09-19 | | | |
| | | Elirks | [] | win.elirks | [] | 2018-04-13 | | | |
| | | Elise | ['EVILNEST'] | win.elise | ['Lotus Blossom'] | 2021-05-25 | | | |
| | | ELMER | ['Elmost'] | win.elmer | ['Danti', 'APT 16'] | 2022-07-05 | | | |
| | | Emdivi | [] | win.emdivi | ['Stone Panda'] | 2021-03-02 | | | |
| | | Emissary | [] | win.emissary | [] | 2021-02-04 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2023-03-14 | | | |
| | | Empire Downloader | [] | win.empire_downloader | [] | 2022-12-01 | | | |
| | | Emudbot | [] | win.emudbot | [] | 2020-08-13 | | | |
| | | EnemyBot | [] | elf.enemybot | [] | 2023-01-31 | | | |
| | | Enfal | ['Lurid'] | win.enfal | [] | 2022-08-30 | | | |
| | | Enigma Loader | [] | win.enigma_loader | [] | 2023-02-13 | | | |
| | | Enrume | ['Ransom32'] | js.enrume | [] | 2020-03-06 | | | |
| | | Ensikology | ['Ensiko'] | php.ensikology | [] | 2020-07-30 | | | |
| | | Entropy | [] | win.entropy | [] | 2022-07-01 | | | |
| | | Enviserv | [] | win.enviserv | [] | 2020-07-03 | | | |
| | | EnvyScout | ['ROOTSAW'] | win.envyscout | [] | 2023-03-14 | | | |
| | | EpicSplit RAT | [] | jar.epicsplit | [] | 2021-06-22 | | | |
| | | Epsilon Red | ['BlackCocaine'] | win.epsilon_red | [] | 2022-03-18 | | | |
| | | EquationDrug | [] | win.equationdrug | ['Equation Group'] | 2022-05-23 | | | |
| | | Equationgroup (Sorting) | [] | win.equationgroup | [] | 2022-01-05 | | | |
| | | Erbium Stealer | [] | win.erbium_stealer | [] | 2022-12-05 | | | |
| | | Erebus | [] | elf.erebus | [] | 2022-02-10 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | Eredel | [] | win.eredel | [] | 2018-09-21 | | | |
| | | Erica Ransomware | [] | win.erica_ransomware | [] | 2020-04-01 | | | |
| | | Eris | [] | win.eris | [] | 2019-10-10 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2022-12-08 | | | |
| | | ESPecter | [] | win.especter | [] | 2021-11-19 | | | |
| | | ESXiArgs | [] | elf.esxi_args | [] | 2023-02-13 | | | |
| | | EternalPetya | ['ExPetr', 'Pnyetya', 'Petna', 'NotPetya', 'Nyetya', 'NonPetya', 'nPetya', 'Diskcoder.C', 'BadRabbit'] | win.eternal_petya | ['TeleBots', 'Sandworm'] | 2023-03-20 | | | |
| | | EternalRocks | ['MicroBotMassiveNet'] | win.eternalrocks | [] | 2022-06-08 | | | |
| | | Eternity Clipper | [] | win.eternity_clipper | [] | 2022-05-25 | | | |
| | | Eternity Ransomware | [] | win.eternity_ransomware | [] | 2022-07-28 | | | |
| | | Eternity Stealer | [] | win.eternity_stealer | [] | 2022-11-21 | | | |
| | | Eternity Worm | [] | win.eternity_worm | [] | 2022-07-28 | | | |
| | | EtumBot | ['HighTide'] | win.etumbot | ['IXESHE'] | 2020-05-23 | | | |
| | | Eventbot | [] | apk.eventbot | [] | 2020-07-16 | | | |
| | | Evilbunny | [] | win.evilbunny | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | EvilGnome | [] | elf.evilgnome | ['Gamaredon Group'] | 2022-03-01 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | EVILNUM | [] | js.evilnum | [] | 2022-06-29 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2022-08-31 | | | |
| | | EvilOSX | [] | osx.evilosx | [] | 2018-02-26 | | | |
| | | EvilPlayout | [] | win.evilplayout | [] | 2022-03-02 | | | |
| | | EvilPony | ['CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | EvilQuest | ['ThiefQuest'] | osx.evilquest | [] | 2023-01-02 | | | |
| | | Evrial | [] | win.evrial | [] | 2018-02-01 | | | |
| | | EwDoor | [] | elf.ewdoor | [] | 2021-12-07 | | | |
| | | Exaramel | [] | elf.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | Exaramel | [] | win.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | ExByte | [] | win.exbyte | [] | 2022-11-09 | | | |
| | | Excalibur | ['Sabresac', 'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Exile RAT | [] | win.exilerat | ['TA413'] | 2020-09-16 | | | |
| | | ExMatter | [] | win.exmatter | [] | 2022-11-18 | | | |
| | | ExoBot | [] | apk.exobot | [] | 2022-06-09 | | | |
| | | Exodus | [] | apk.exodus | [] | 2020-02-27 | | | |
| | | Exorcist | [] | win.exorcist | [] | 2020-07-30 | | | |
| | | Expiro | ['Xpiro'] | win.expiro | [] | 2022-02-16 | | | |
| | | ExplosiveRAT | [] | win.explosive_rat | [] | 2022-10-07 | | | |
| | | ext4 | [] | elf.ext4 | [] | 2022-07-29 | | | |
| | | Eye Pyramid | [] | win.eye_pyramid | [] | 2017-02-15 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | Fabookie | [] | win.fabookie | [] | 2023-02-06 | | | |
| | | Facefish | [] | elf.facefish | [] | 2021-06-07 | | | |
| | | FaceStealer | [] | apk.facestealer | [] | 2022-05-17 | | | |
| | | FailyTale | [] | osx.failytale | [] | 2019-04-04 | | | |
| | | Fake Pornhub | [] | apk.pornhub | [] | 2017-02-15 | | | |
| | | FakeAdBlocker | [] | apk.fakeadblocker | [] | 2021-07-21 | | | |
| | | FakeGram | ['FakeTGram'] | apk.faketgram | [] | 2018-11-19 | | | |
| | | FakeRean | ['Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeSpy | [] | apk.fakespy | [] | 2021-07-07 | | | |
| | | FakeTC | [] | win.faketc | [] | 2021-08-17 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | [] | 2023-03-13 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | FantomCrypt | [] | win.fantomcrypt | [] | 2018-01-11 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastCash | [] | aix.fastcash | ['Lazarus Group'] | 2022-05-03 | | | |
| | | FastFire | [] | apk.fastfire | ['Kimsuky'] | 2022-12-20 | | | |
| | | FastLoader | [] | win.fastloader | [] | 2020-01-14 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |
| | | FastSpy | [] | apk.fastspy | ['Kimsuky'] | 2022-12-20 | | | |
| | | FatalRat | [] | win.fatal_rat | [] | 2022-03-30 | | | |
| | | FatDuke | [] | win.fatduke | ['APT29'] | 2020-05-23 | | | |
| | | Fauppod | [] | win.fauppod | [] | 2023-03-13 | | | |
| | | FBot | [] | elf.fbot | [] | 2021-03-04 | | | |
| | | FCT | [] | win.fct | [] | 2020-02-10 | | | |
| | | FEimea RAT | [] | jar.feimea_rat | [] | 2019-03-07 | | | |
| | | Felismus | [] | win.felismus | ['Sowbug'] | 2017-11-21 | | | |
| | | Felixroot | [] | win.felixroot | ['GreyEnergy'] | 2022-11-28 | | | |
| | | fengine | [] | win.fengine | [] | 2022-08-22 | | | |
| | | Feodo | ['Cridex', 'Bugat'] | win.feodo | [] | 2022-08-31 | | | |
| | | FFDroider | [] | win.ffdroider | [] | 2022-05-04 | | | |
| | | Ficker Stealer | [] | win.fickerstealer | [] | 2022-11-09 | | | |
| | | FileCoder | [] | apk.filecoder | [] | 2019-07-31 | | | |
| | | Filecoder | [] | win.unidentified_030 | [] | 2017-07-11 | | | |
| | | FileIce | [] | win.fileice_ransom | [] | 2018-02-13 | | | |
| | | Filerase | [] | win.filerase | ['APT33'] | 2020-04-21 | | | |
| | | Final1stSpy | [] | win.final1stspy | ['APT37'] | 2018-10-23 | | | |
| | | FindPOS | ['Poseidon'] | win.findpos | [] | 2021-09-19 | | | |
| | | FinFisher | [] | apk.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher | [] | elf.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher | [] | osx.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher RAT | ['FinSpy'] | win.finfisher | [] | 2022-02-04 | | | |
| | | Fire Chili | [] | win.firechili | ['Shell Crew'] | 2022-04-04 | | | |
| | | Fireball | [] | win.fireball | [] | 2017-07-11 | | | |
| | | FireBird RAT | [] | win.firebird_rat | [] | 2020-03-13 | | | |
| | | FireCrypt | [] | win.firecrypt | [] | | | | |
| | | FireMalv | [] | win.firemalv | ['Rocket Kitten'] | 2018-04-17 | | | |
| | | FirstRansom | [] | win.first_ransom | [] | 2017-02-15 | | | |
| | | FishMaster | ['JollyJellyfish'] | win.fishmaster | ['Earth Lusca'] | 2022-07-25 | | | |
| | | FiveHands | ['Thieflock'] | win.fivehands | ['[Unnamed group]'] | 2022-09-20 | | | |
| | | Flagpro | ['BUSYICE'] | win.flagpro | ['BlackTech'] | 2022-09-30 | | | |
| | | Flame | ['sKyWIper'] | win.flame | [] | 2022-11-18 | | | |
| | | FlashBack | ['FakeFlash'] | osx.flashback | [] | 2022-05-11 | | | |
| | | FLASHFLOOD | [] | win.flashflood | ['APT 30'] | 2022-08-25 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | ['TA505'] | 2022-02-14 | | | |
| | | FlawedGrace | ['GraceWire'] | win.flawedgrace | ['TA505'] | 2022-12-12 | | | |
| | | FlexiSpy | [] | apk.flexispy | [] | 2021-05-25 | | | |
| | | FlexiSpy | [] | symbian.flexispy | [] | 2017-05-01 | | | |
| | | FlexiSpy | [] | win.flexispy | [] | 2017-05-01 | | | |
| | | FlexNet | ['gugi'] | apk.flexnet | [] | 2020-02-26 | | | |
| | | FlokiBot | [] | win.floki_bot | [] | 2018-01-22 | | | |
| | | floodor | [] | elf.floodor | [] | 2019-08-12 | | | |
| | | FlowCloud | [] | win.flowcloud | ['Stone Panda'] | 2022-04-29 | | | |
| | | FlowerPower | ['BoBoStealer'] | ps1.flowerpower | ['Kimsuky'] | 2021-09-14 | | | |
| | | FlowerShop | [] | win.flowershop | [] | 2020-05-07 | | | |
| | | Floxif | [] | win.floxif | [] | 2021-11-08 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2022-12-29 | | | |
| | | Flusihoc | [] | win.flusihoc | [] | 2017-10-09 | | | |
| | | FlyingDutchman | [] | win.flying_dutchman | ['Calypso group'] | 2019-11-12 | | | |
| | | FlyStudio | [] | win.flystudio | [] | 2020-03-19 | | | |
| | | FlyTrap | [] | apk.flytrap | [] | 2021-08-09 | | | |
| | | Fobber | [] | win.fobber | [] | 2017-08-01 | | | |
| | | Fodcha | [] | elf.fodcha | [] | 2022-11-01 | | | |
| | | FONIX | [] | win.fonix | [] | 2021-05-04 | | | |
| | | FontOnLake | [] | elf.fontonlake | [] | 2021-10-11 | | | |
| | | forbiks | ['Forbix'] | vbs.forbiks | [] | 2019-09-03 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2023-03-20 | | | |
| | | FormerFirstRAT | ['ffrat'] | win.former_first_rat | ['DragonOK', 'Samurai Panda'] | 2022-08-26 | | | |
| | | FortuneCrypt | [] | win.fortunecrypt | [] | 2019-10-11 | | | |
| | | FoxSocket | [] | win.foxsocket | [] | 2021-10-24 | | | |
| | | FRat | [] | win.frat | [] | 2020-06-12 | | | |
| | | FRat Loader | [] | ps1.frat_loader | [] | 2020-06-12 | | | |
| | | Freenki Loader | [] | win.freenki | ['APT37'] | 2020-12-16 | | | |
| | | FriedEx | ['BitPaymer', 'DoppelPaymer', 'IEncrypt'] | win.friedex | ['INDRIK SPIDER'] | 2022-07-01 | | | |
| | | FritzFrog | [] | elf.fritzfrog | [] | 2022-02-16 | | | |
| | | FruitFly | ['Quimitchin'] | osx.fruitfly | [] | 2020-05-02 | | | |
| | | FTCODE | [] | ps1.ftcode | [] | 2020-06-24 | | | |
| | | FudModule | [] | win.fudmodule | ['Lazarus Group'] | 2023-03-21 | | | |
| | | FunkyBot | [] | apk.funkybot | ['Yanbian Gang'] | 2022-07-13 | | | |
| | | FunnyDream | [] | win.funny_dream | [] | 2021-12-23 | | | |
| | | FunnySwitch | ['RouterGod'] | win.funnyswitch | ['Earth Lusca', 'Winnti Umbrella'] | 2022-09-26 | | | |
| | | FurBall | [] | apk.furball | ['Domestic Kitten'] | 2022-10-30 | | | |
| | | Furtim | [] | win.furtim | [] | 2017-02-15 | | | |
| | | FuxSocy | [] | win.fuxsocy | [] | 2019-11-15 | | | |
| | | Gacrux | [] | win.gacrux | [] | 2020-10-29 | | | |
| | | GalaxyLoader | [] | win.galaxyloader | [] | 2018-03-26 | | | |
| | | gamapos | ['pios'] | win.gamapos | [] | 2018-04-25 | | | |
| | | Gameover DGA | [] | win.gameover_dga | [] | 2016-04-18 | | | |
| | | Gameover P2P | ['GOZ', 'Mapp', 'ZeuS P2P'] | win.gameover_p2p | [] | 2022-05-05 | | | |
| | | GamePlayerFramework | [] | win.game_player_framework | [] | 2022-10-25 | | | |
| | | Gamotrol | [] | win.gamotrol | [] | 2018-07-24 | | | |
| | | Gandcrab | ['GrandCrab'] | win.gandcrab | ['Pinchy Spider'] | 2022-11-09 | | | |
| | | Gasket | [] | win.gasket | [] | 2021-07-21 | | | |
| | | Gaudox | [] | win.gaudox | [] | 2017-11-21 | | | |
| | | Gauss | [] | win.gauss | [] | 2021-12-17 | | | |
| | | Gazer | ['WhiteBear'] | win.gazer | ['Turla'] | 2023-02-13 | | | |
| | | GCleaner | [] | win.gcleaner | [] | 2023-02-06 | | | |
| | | gcman | [] | win.gcman | [] | 2018-09-11 | | | |
| | | Gdrive | ['DoomDrive', 'GoogleDriveSucks'] | win.gdrive | ['APT 29', 'APT29'] | 2022-10-20 | | | |
| | | GearInformer | [] | win.gearinformer | [] | 2017-11-21 | | | |
| | | GEARSHIFT | [] | win.gearshift | ['APT41'] | 2019-08-13 | | | |
| | | GEMCUTTER | [] | win.gemcutter | ['APT 30'] | 2019-04-17 | | | |
| | | GeminiDuke | [] | win.geminiduke | [] | 2022-12-05 | | | |
| | | Geost | [] | apk.geost | [] | 2020-12-08 | | | |
| | | Get2 | ['FRIENDSPEAK', 'GetandGo'] | win.get2 | ['TA505'] | 2022-02-14 | | | |
| | | GetMail | [] | win.getmail | ['Comment Crew'] | 2018-02-10 | | | |
| | | GetMyPass | ['getmypos'] | win.getmypass | [] | 2022-09-19 | | | |
| | | get_pwd | [] | win.get_pwd | [] | 2020-01-23 | | | |
| | | GGLdr | [] | vbs.ggldr | [] | 2020-05-27 | | | |
| | | Gh0stnet | ['Remosh'] | win.ghostnet | [] | 2022-03-07 | | | |
| | | Gh0stTimes | [] | win.gh0sttimes | [] | 2022-11-03 | | | |
| | | GHAMBAR | [] | win.ghambar | [] | 2023-02-16 | | | |
| | | Ghimob | [] | apk.ghimob | [] | 2020-11-11 | | | |
| | | Ghole | ['Gholee', 'CoreImpact (Modified)'] | win.ghole | ['Rocket Kitten'] | 2022-04-29 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2023-02-17 | | | |
| | | GhostAdmin | ['Ghost iBot'] | win.ghost_admin | [] | 2017-04-05 | | | |
| | | GhostCtrl | [] | apk.ghostctrl | [] | 2017-07-19 | | | |
| | | GhostEmperor | [] | win.ghostemperor | [] | 2021-10-24 | | | |
| | | GhostMiner | [] | ps1.ghostminer | [] | 2019-09-30 | | | |
| | | GhostSecret | [] | win.ghost_secret | ['Lazarus Group'] | 2023-02-27 | | | |
| | | Gibberish | [] | win.gibberish | [] | 2020-03-22 | | | |
| | | Giffy | [] | win.giffy | [] | 2021-02-04 | | | |
| | | GIMMICK | [] | osx.gimmick | [] | 2022-03-25 | | | |
| | | Ginp | [] | apk.ginp | [] | 2022-09-26 | | | |
| | | Ginwui | [] | win.ginwui | [] | 2020-07-15 | | | |
| | | Ginzo Stealer | [] | win.ginzo | [] | 2022-11-02 | | | |
| | | Gitpaste-12 | [] | elf.gitpaste12 | [] | 2020-11-09 | | | |
| | | GlanceLove | [] | apk.glancelove | ['AridViper'] | 2018-07-06 | | | |
| | | Glasses | ['Wordpress Bruteforcer'] | win.glasses | [] | 2016-12-29 | | | |
| | | GlassRAT | [] | win.glassrat | [] | 2018-03-26 | | | |
| | | GlitchPOS | [] | win.glitch_pos | [] | 2019-03-13 | | | |
| | | Globe | [] | win.globe_ransom | [] | 2017-02-15 | | | |
| | | GlobeImposter | ['Fake Globe'] | win.globeimposter | [] | 2023-03-20 | | | |
| | | GlooxMail | [] | win.glooxmail | ['Comment Crew'] | 2018-02-13 | | | |
| | | GlowSpark | [] | vbs.glowspark | [] | 2022-02-17 | | | |
| | | Glupteba | [] | win.glupteba | [] | 2023-01-18 | | | |
| | | Glupteba Proxy | [] | elf.glupteba_proxy | [] | 2022-03-28 | | | |
| | | Gmera | ['StockSteal', 'Kassi'] | osx.gmera | [] | 2020-07-20 | | | |
| | | GnatSpy | [] | apk.gnatspy | ['AridViper'] | 2021-05-26 | | | |
| | | GoBotKR | [] | win.gobotkr | [] | 2019-07-11 | | | |
| | | goCryptoLocker | [] | win.gocryptolocker | [] | 2020-05-02 | | | |
| | | Godfather | [] | apk.godfather | [] | 2023-02-09 | | | |
| | | Godlike12 | ['GOSLU'] | win.godlike12 | [] | 2020-07-30 | | | |
| | | Godlua | [] | elf.godlua | [] | 2019-07-02 | | | |
| | | goDoH | [] | win.godoh | [] | 2019-12-08 | | | |
| | | Godzilla Loader | [] | win.godzilla_loader | [] | 2019-06-08 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2022-09-30 | | | |
| | | Gofing | ['Velocity Polymorphic Compression Malware'] | win.gofing | [] | 2022-03-18 | | | |
| | | Goggles | [] | win.goggles | ['Comment Crew'] | 2018-02-10 | | | |
| | | GoGoogle | ['BossiTossi'] | win.gogoogle | [] | 2020-07-07 | | | |
| | | GoldDragon | ['Lovexxx'] | win.gold_dragon | [] | 2022-02-10 | | | |
| | | GoldenEagle | [] | apk.goldeneagle | ['HenBox'] | 2020-07-15 | | | |
| | | GoldenEye | ['Petya/Mischa'] | win.goldeneye | [] | 2017-07-17 | | | |
| | | GoldenHelper | [] | win.goldenhelper | [] | 2022-02-17 | | | |
| | | GoldenRAT | [] | apk.goldenrat | ['APT-C-27'] | 2019-03-21 | | | |
| | | GoldenSpy | [] | win.goldenspy | [] | 2020-11-09 | | | |
| | | GoldMax | ['SUNSHUTTLE'] | win.goldmax | ['UNC2452'] | 2022-04-25 | | | |
| | | Golroted | [] | win.golroted | [] | 2017-12-14 | | | |
| | | GoMet | [] | win.gomet | [] | 2022-07-27 | | | |
| | | Gomorrah stealer | [] | win.gomorrah_stealer | [] | 2022-01-12 | | | |
| | | Goodor | ['Fuerboos'] | win.goodor | [] | 2020-04-21 | | | |
| | | GoogleDrive RAT | [] | win.google_drive_rat | ['OilRig'] | 2018-03-26 | | | |
| | | goontact | [] | apk.goontact | [] | 2021-09-19 | | | |
| | | GooPic Drooper | [] | win.goopic | [] | 2018-01-25 | | | |
| | | GootKit | ['Waldek', 'Xswkit', 'talalpek'] | win.gootkit | [] | 2023-01-13 | | | |
| | | GootLoader | [] | js.gootloader | [] | 2023-01-31 | | | |
| | | Gophe | [] | win.gophe | [] | 2020-10-05 | | | |
| | | GOSH | [] | elf.gosh | [] | 2020-08-18 | | | |
| | | GOTROJ | [] | win.gotroj | ['FIN7'] | 2021-09-02 | | | |
| | | GovRAT | [] | win.govrat | [] | 2018-04-20 | | | |
| | | Gozi | ['CRM', 'Gozi CRM', 'Papras', 'Snifula', 'Ursnif'] | win.gozi | [] | 2023-03-20 | | | |
| | | GPCode | [] | win.gpcode | [] | 2018-02-09 | | | |
| | | GPlayed | [] | apk.gplayed | [] | 2018-11-16 | | | |
| | | GrabBot | [] | win.grabbot | [] | 2017-03-28 | | | |
| | | Graftor | [] | win.graftor | [] | 2017-09-14 | | | |
| | | GRAMDOOR | ['Small Sieve'] | win.gramdoor | ['MuddyWater'] | 2022-03-14 | | | |
| | | Grandoreiro | [] | win.grandoreiro | [] | 2022-08-19 | | | |
| | | GrandSteal | [] | win.grandsteal | [] | 2019-10-23 | | | |
| | | GraphicalNeutrino | [] | win.graphical_neutrino | ['APT29'] | 2023-03-14 | | | |
| | | Graphiron | [] | win.graphiron | ['SaintBear'] | 2023-02-13 | | | |
| | | Graphite | [] | win.graphite | [] | 2022-09-26 | | | |
| | | Graphon | [] | win.graphon | [] | 2021-11-03 | | | |
| | | GraphSteel | [] | win.graphsteel | [] | 2023-02-27 | | | |
| | | Grateful POS | ['FrameworkPOS', 'SCRAPMINT', 'trinity'] | win.grateful_pos | ['Skeleton Spider', 'FIN6'] | 2021-05-31 | | | |
| | | Gratem | [] | win.gratem | [] | 2017-04-06 | | | |
| | | Gravity RAT | [] | win.gravity_rat | [] | 2021-02-25 | | | |
| | | GREASE | [] | win.grease | ['Kimsuky'] | 2023-02-09 | | | |
| | | GreedyAntd | [] | elf.greedyantd | ['Pacha Group'] | 2019-05-18 | | | |
| | | GreenShaitan | ['eoehttp'] | win.greenshaitan | [] | 2018-04-23 | | | |
| | | grelos | [] | js.grelos | [] | 2021-01-18 | | | |
| | | GreyEnergy | [] | win.grey_energy | ['GreyEnergy', 'TeleBots'] | 2022-08-25 | | | |
| | | Griffon | ['Harpy'] | js.griffon | ['FIN7'] | 2022-06-27 | | | |
| | | GriftHorse | [] | apk.grifthorse | [] | 2021-10-24 | | | |
| | | GRILLMARK | ['Hellsing Backdoor'] | win.grillmark | ['Hellsing', 'Leviathan'] | 2021-02-06 | | | |
| | | GRIMAGENT | [] | win.grimagent | ['UNC1878'] | 2021-10-08 | | | |
| | | GrimPlant | [] | win.grimplant | [] | 2023-02-27 | | | |
| | | Grinju Downloader | [] | vbs.grinju | [] | 2020-10-05 | | | |
| | | GROK | [] | win.grok | ['Equation Group'] | 2022-05-23 | | | |
| | | GRUNT | [] | win.grunt | [] | 2023-01-19 | | | |
| | | gsecdump | [] | win.gsecdump | [] | 2018-04-17 | | | |
| | | Guard | [] | py.guard | [] | 2021-12-17 | | | |
| | | Guerrilla | [] | apk.guerrilla | [] | 2022-03-02 | | | |
| | | GuiInject | [] | ios.guiinject | [] | 2022-09-12 | | | |
| | | GUP Proxy Tool | [] | win.gup_proxy | [] | 2019-08-07 | | | |
| | | Gustuff | [] | apk.gustuff | [] | 2021-05-04 | | | |
| | | Gwisin | [] | win.gwisin | [] | 2022-11-11 | | | |
| | | H1N1 Loader | [] | win.h1n1 | [] | 2016-12-27 | | | |
| | | HabitsRAT | [] | elf.habitsrat | [] | 2021-09-10 | | | |
| | | HabitsRAT | [] | win.habitsrat | [] | 2021-04-28 | | | |
| | | Hacksfase | [] | win.hacksfase | ['Comment Crew'] | 2018-02-13 | | | |
| | | HackSpy | [] | win.hackspy | [] | 2021-06-29 | | | |
| | | Hades | [] | win.hades | ['GOLD WINTER'] | 2022-07-01 | | | |
| | | Haiduc | [] | elf.haiduc | [] | 2018-11-08 | | | |
| | | Hajime | [] | elf.hajime | [] | 2020-10-12 | | | |
| | | Hakai | [] | elf.hakai | [] | 2018-09-05 | | | |
| | | Hakbit | ['Thanos Ransomware'] | win.hakbit | [] | 2022-05-25 | | | |
| | | HALFBAKED | [] | vbs.halfbaked | ['Anunak'] | 2020-06-25 | | | |
| | | Hamweq | [] | win.hamweq | [] | 2020-07-16 | | | |
| | | Hancitor | ['Chanitor'] | win.hancitor | [] | 2022-08-22 | | | |
| | | Hand of Thief | ['Hanthie'] | elf.hand_of_thief | [] | 2020-03-02 | | | |
| | | HandyMannyPot | [] | elf.handymannypot | [] | 2019-10-04 | | | |
| | | HappyLocker (HiddenTear?) | [] | win.happy_locker | [] | 2017-04-29 | | | |
| | | HARDRAIN | [] | apk.hardrain | ['Lazarus Group'] | 2019-09-09 | | | |
| | | HARDRAIN | [] | win.hardrain | ['Lazarus Group'] | 2020-03-11 | | | |
| | | Harnig | ['Piptea'] | win.harnig | [] | 2018-01-22 | | | |
| | | Haron Ransomware | [] | win.haron | [] | 2021-09-09 | | | |
| | | HavanaCrypt | [] | win.havana_crypt | [] | 2022-07-13 | | | |
| | | Havex RAT | [] | win.havex_rat | ['Energetic Bear'] | 2022-03-25 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2023-02-16 | | | |
| | | HAWKBALL | [] | win.hawkball | [] | 2019-07-10 | | | |
| | | HawkEye Keylogger | ['HawkEye', 'HawkEye Reborn', 'Predator Pain'] | win.hawkeye_keylogger | [] | 2023-01-31 | | | |
| | | HawkShaw | [] | apk.hawkshaw | [] | 2021-05-12 | | | |
| | | HDMR | ['GO-SPORT'] | win.hdmr | [] | 2019-12-18 | | | |
| | | HDRoot | [] | win.hdroot | ['Axiom'] | 2020-03-19 | | | |
| | | HeaderTip | [] | win.headertip | [] | 2022-08-05 | | | |
| | | Helauto | [] | win.helauto | ['Comment Crew'] | 2018-02-10 | | | |
| | | HelloBot | [] | win.hellobot | ['Earth Berberoka'] | 2022-07-25 | | | |
| | | HelloKitty | [] | elf.hellokitty | [] | 2023-02-03 | | | |
| | | HelloKitty | ['KittyCrypt'] | win.hellokitty | [] | 2023-02-15 | | | |
| | | Helminth | [] | win.helminth | ['APT34'] | 2021-06-29 | | | |
| | | Heloag | [] | win.heloag | [] | 2018-01-25 | | | |
| | | HenBox | [] | apk.henbox | ['HenBox'] | 2020-03-02 | | | |
| | | Herbst | [] | win.herbst | [] | 2018-01-29 | | | |
| | | Heriplor | [] | win.heriplor | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Hermes | [] | win.hermes | ['Lazarus Group'] | 2021-12-13 | | | |
| | | HermeticWiper | ['DriveSlayer', 'FoxBlade', 'KillDisk.NCV', 'NEARMISS'] | win.hermeticwiper | [] | 2023-03-20 | | | |
| | | HermeticWizard | [] | win.hermeticwizard | [] | 2023-03-20 | | | |
| | | Hermit | [] | apk.hermit | [] | 2022-08-31 | | | |
| | | HeroRAT | [] | apk.hero_rat | [] | 2018-06-25 | | | |
| | | HerpesBot | [] | win.herpes | [] | 2016-05-31 | | | |
| | | HesperBot | [] | win.hesperbot | [] | 2016-04-18 | | | |
| | | heyoka | [] | win.heyoka | [] | 2022-07-01 | | | |
| | | Hi-Zor RAT | [] | win.hi_zor_rat | [] | 2018-02-15 | | | |
| | | HiAsm | [] | win.hiasm | [] | 2022-01-11 | | | |
| | | HiatusRAT | [] | elf.hiatus_rat | [] | 2023-03-13 | | | |
| | | Hidden Bee | [] | win.hiddenbee | [] | 2022-02-01 | | | |
| | | HiddenAd | [] | apk.hiddenad | [] | 2022-08-02 | | | |
| | | HiddenLotus | [] | osx.hiddenlotus | [] | 2018-03-23 | | | |
| | | HiddenTear | ['FuckUnicorn'] | win.hiddentear | [] | 2021-11-08 | | | |
| | | HiddenWasp | [] | elf.hiddenwasp | [] | 2022-07-12 | | | |
| | | Hide and Seek | ['HNS'] | elf.hideandseek | [] | 2018-12-19 | | | |
| | | HideDRV | [] | win.hidedrv | [] | 2020-05-23 | | | |
| | | HIGHNOON | [] | win.highnoon | ['APT41', 'Aurora Panda'] | 2021-03-02 | | | |
| | | HIGHNOON.BIN | [] | win.highnoon_bin | ['APT41'] | 2019-08-13 | | | |
| | | HIGHNOTE | ['ChyNode'] | win.highnote | ['Axiom'] | 2019-07-31 | | | |
| | | HiKit | [] | win.hikit | ['Aurora Panda', 'Hurricane Panda'] | 2022-08-30 | | | |
| | | HilalRAT | [] | apk.hilalrat | [] | 2022-04-25 | | | |
| | | himan | [] | win.himan | [] | 2018-09-11 | | | |
| | | Himera Loader | [] | win.himera_loader | [] | 2020-05-18 | | | |
| | | HinataBot | [] | elf.hinata_bot | [] | 2023-03-20 | | | |
| | | Hipid | [] | elf.hipid | ['BlackTech'] | 2022-09-19 | | | |
| | | Hisoka | [] | win.hisoka | [] | 2020-11-09 | | | |
| | | Hive | [] | elf.hive | [] | 2022-12-29 | | | |
| | | Hive | [] | win.hive | [] | 2023-01-13 | | | |
| | | Hive (Vault 8) | [] | elf.vault8_hive | ['Longhorn'] | 2023-02-02 | | | |
| | | HLUX | [] | win.hlux | [] | 2016-04-26 | | | |
| | | Holcus Installer (Adware) | [] | win.holcus | [] | 2021-02-04 | | | |
| | | homefry | [] | win.homefry | ['Leviathan'] | 2020-05-23 | | | |
| | | Hook | [] | apk.hook | [] | 2023-02-06 | | | |
| | | HookInjEx | [] | win.hookinjex | [] | 2020-09-21 | | | |
| | | HOPLIGHT | ['HANGMAN'] | win.hoplight | ['Lazarus Group'] | 2020-08-13 | | | |
| | | Hopscotch | [] | win.hopscotch | [] | 2021-02-06 | | | |
| | | Horus Eyes RAT | [] | win.horus_eyes_rat | [] | 2021-08-06 | | | |
| | | HorusEyes RAT | [] | win.horuseyes | [] | 2021-02-06 | | | |
| | | HOTCROISSANT | [] | win.hotcroissant | ['Lazarus Group'] | 2020-04-17 | | | |
| | | HOTWAX | [] | win.hotwax | ['Lazarus Group'] | 2019-10-14 | | | |
| | | Houdini | ['Hworm', 'Jenxcus', 'Kognito', 'Njw0rm', 'WSHRAT', 'dinihou', 'dunihi'] | win.houdini | [] | 2023-01-25 | | | |
| | | HtBot | [] | win.htbot | [] | 2017-05-29 | | | |
| | | HTML5 Encoding | [] | js.turla_ff_ext | ['Turla'] | 2021-07-20 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | HTran | ['HUC Packet Transmit Tool'] | win.htran | ['GALLIUM', 'UPS'] | 2022-07-01 | | | |
| | | HttpBrowser | ['HttpDump'] | win.httpbrowser | ['Wekby', 'EMISSARY PANDA'] | 2022-07-05 | | | |
| | | httpdropper | ['httpdr0pper'] | win.httpdropper | [] | 2018-09-13 | | | |
| | | http_troy | [] | win.http_troy | [] | 2018-09-19 | | | |
| | | Hubnr | [] | elf.hubnr | [] | 2021-04-14 | | | |
| | | HUI Loader | [] | win.hui_loader | [] | 2022-09-20 | | | |
| | | Hunter Stealer | [] | win.hunter | [] | 2020-11-12 | | | |
| | | Hupigon | [] | win.hupigon | [] | 2020-05-02 | | | |
| | | Hussar | [] | win.hussar | ['Calypso group'] | 2019-11-12 | | | |
| | | HxDef | ['HacDef', 'HackerDefender', 'HackDef'] | win.hxdef | [] | 2020-03-19 | | | |
| | | Hydra | [] | apk.hydra | [] | 2022-12-07 | | | |
| | | HyperBro | [] | win.hyperbro | ['EMISSARY PANDA'] | 2022-11-07 | | | |
| | | HYPERSCRAPE | [] | win.hyperscrape | [] | 2022-08-25 | | | |
| | | HyperSSL | ['SysUpdate'] | elf.hyperssl | ['APT27'] | 2023-03-13 | | | |
| | | HyperSSL | ['FOCUSFJORD', 'Soldier', 'Sysupdate'] | win.hyperssl | ['EMISSARY PANDA'] | 2023-03-13 | | | |
| | | HZ RAT | [] | win.hzrat | [] | 2022-11-18 | | | |
| | | Icarus | [] | win.icarus | [] | 2022-10-14 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2020-03-02 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2023-03-21 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2022-03-02 | | | |
| | | Icefog | ['Fucobha'] | win.icefog | [] | 2022-07-29 | | | |
| | | IceRat | [] | jar.icerat | [] | 2020-12-03 | | | |
| | | Icnanker | [] | elf.icnanker | [] | 2020-04-01 | | | |
| | | IconDown | [] | win.icondown | ['BlackTech'] | 2019-12-08 | | | |
| | | IcyHeart | ['Troxen'] | win.icyheart | [] | 2020-03-19 | | | |
| | | IDKEY | [] | win.idkey | [] | 2017-09-20 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | IISpy | ['BadIIS'] | win.iispy | [] | 2021-09-19 | | | |
| | | Iloveyou | ['LoveLetter', 'Love Bug'] | vbs.iloveyou | [] | 2019-05-20 | | | |
| | | Imecab | [] | win.imecab | ['Leafminer'] | 2020-04-21 | | | |
| | | Imminent Monitor RAT | [] | win.imminent_monitor_rat | ['APT-C-36'] | 2022-06-09 | | | |
| | | iMuler | ['Revir'] | osx.imuler | [] | 2019-09-19 | | | |
| | | Incubator | [] | win.incubator | [] | 2022-02-14 | | | |
| | | IndigoDrop | [] | win.indigodrop | [] | 2020-12-26 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2023-01-19 | | | |
| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2023-03-20 | | | |
| | | Inferno | [] | win.inferno | [] | 2020-03-13 | | | |
| | | InfoDot | [] | win.infodot | [] | 2020-04-01 | | | |
| | | Infy | ['Foudre'] | win.infy | [] | 2021-02-20 | | | |
| | | Inlock | [] | win.inlock | [] | 2022-11-21 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | inter | [] | js.inter | [] | 2019-07-31 | | | |
| | | Interception | [] | osx.interception | ['Lazarus Group'] | 2022-12-29 | | | |
| | | Interception | [] | win.interception | [] | 2020-06-17 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IoT Reaper | ['IoTroop', 'Reaper', 'iotreaper'] | elf.iot_reaper | [] | 2020-04-13 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | apk.ipstorm | [] | 2020-10-23 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | elf.ipstorm | [] | 2021-03-25 | | | |
| | | IRATA | [] | apk.irata | [] | 2022-09-06 | | | |
| | | Irc16 | [] | elf.backdoor_irc16 | [] | 2017-02-15 | | | |
| | | Ironcat | [] | win.ironcat | [] | 2020-10-05 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16'] | 2020-04-16 | | | |
| | | IronNetInjector | [] | win.ironnetinjector | [] | 2023-01-25 | | | |
| | | IRRat | [] | apk.irrat | [] | 2018-03-22 | | | |
| | | IsaacWiper | ['LASAINRAW'] | win.isaacwiper | [] | 2023-03-20 | | | |
| | | ISFB | ['Gozi ISFB', 'IAP', 'Pandemyia'] | win.isfb | ['GOLD CABIN'] | 2023-03-20 | | | |
| | | ISMAgent | [] | win.ismagent | ['Greenbug', 'APT34'] | 2022-07-29 | | | |
| | | ISMDoor | [] | win.ismdoor | ['Greenbug'] | 2022-07-29 | | | |
| | | iSpy Keylogger | [] | win.ispy_keylogger | [] | 2020-05-23 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsraBye | [] | win.israbye | [] | 2023-01-19 | | | |
| | | IsSpace | ['NfLog RAT'] | win.isspace | ['DragonOK', 'Samurai Panda'] | 2022-07-29 | | | |
| | | IXWare | [] | win.ixware | [] | 2020-10-19 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | JadeRAT | [] | apk.jaderat | [] | 2017-11-17 | | | |
| | | Jaff | [] | win.jaff | [] | 2023-02-21 | | | |
| | | Jager Decryptor | [] | win.jager_decryptor | [] | 2016-12-28 | | | |
| | | Jaku | ['C3PRO-RACOON', 'EQUINOX', 'KCNA Infostealer', 'Reconcyc'] | win.jaku | ['DarkHotel'] | 2022-06-09 | | | |
| | | Janeleiro | [] | win.janeleiro | [] | 2021-06-16 | | | |
| | | Janicab | [] | osx.janicab | ['Evilnum'] | 2023-02-21 | | | |
| | | Janicab | [] | vbs.janicab | ['Evilnum'] | 2022-12-14 | | | |
| | | jason | [] | win.jason | ['OilRig'] | 2020-05-23 | | | |
| | | JasperLoader | [] | ps1.jasperloader | [] | 2020-03-27 | | | |
| | | Jasus | [] | win.jasus | ['Cleaver'] | 2017-05-21 | | | |
| | | JavaDispCash | [] | jar.javadispcash | [] | 2020-01-06 | | | |
| | | JavaLocker | ['JavaEncrypt Ransomware'] | jar.javalocker | [] | 2020-03-27 | | | |
| | | JCry | [] | win.jcry | [] | 2019-03-06 | | | |
| | | Jeniva | [] | js.jeniva | [] | 2021-08-24 | | | |
| | | Jeno | ['Valeria', 'Jest'] | win.jeno | [] | 2020-04-20 | | | |
| | | JenX | [] | elf.jenx | [] | 2018-02-26 | | | |
| | | Jetriz | [] | js.jetriz | [] | 2021-08-24 | | | |
| | | JhoneRAT | [] | win.jhone_rat | [] | 2022-02-09 | | | |
| | | Jigsaw | [] | win.jigsaw | [] | 2016-04-19 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | Joanap | [] | win.joanap | ['Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2022-10-04 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JQJSNICKER | [] | win.jqjsnicker | ['CIA'] | 2017-03-28 | | | |
| | | jRAT | ['Jacksbot'] | jar.jrat | [] | 2020-06-08 | | | |
| | | JripBot | [] | win.jripbot | ['WildNeutron'] | 2020-03-13 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2022-04-05 | | | |
| | | jspRAT | [] | js.jsprat | [] | 2021-12-08 | | | |
| | | jSpy | [] | jar.jspy | [] | 2018-05-14 | | | |
| | | JSSLoader | [] | win.jssloader | ['Anunak'] | 2022-08-19 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2022-08-30 | | | |
| | | JUMPALL | [] | win.jumpall | ['APT41'] | 2019-08-13 | | | |
| | | KAgent | [] | win.kagent | ['Cleaver'] | 2017-05-21 | | | |
| | | Kaiji | [] | elf.kaiji | [] | 2022-09-30 | | | |
| | | Kaiten | ['STD'] | elf.kaiten | [] | 2023-03-17 | | | |
| | | Kami | [] | win.kami | [] | 2022-12-20 | | | |
| | | Karagany | ['Karagny'] | win.karagany | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2022-08-28 | | | |
| | | Karkoff | ['CACTUSPIPE', 'MailDropper', 'OILYFACE'] | win.karkoff | ['DNSpionage', 'OilRig'] | 2023-02-06 | | | |
| |