| | | NetTraveler | ['TravNet'] | win.nettraveler | ['NetTraveler'] | 2022-10-06 | | | |
| | | Neutrino | ['Kasidet'] | win.neutrino | [] | 2021-09-22 | | | |
| | | Neutrino POS | [] | win.neutrino_pos | [] | 2017-07-12 | | | |
| | | Nevada | [] | win.nevada | [] | 2024-02-02 | | | |
| | | NewBounce | [] | win.newbounce | [] | 2021-12-15 | | | |
| | | NewCore RAT | [] | win.newcore_rat | ['Hellsing'] | 2020-09-25 | | | |
| | | NewPass | [] | win.newpass | ['APT29', 'Turla'] | 2022-10-17 | | | |
| | | NewPosThings | [] | win.newposthings | [] | 2020-03-19 | | | |
| | | NewsReels | [] | win.newsreels | ['Comment Crew'] | 2018-02-10 | | | |
| | | NewCT | ['CT'] | win.new_ct | ['DragonOK'] | 2022-07-29 | | | |
| | | Nexster Bot | [] | win.nexster_bot | [] | 2017-04-29 | | | |
| | | NightClub | [] | win.nightclub | ['MoustachedBouncer'] | 2023-08-11 | | | |
| | | Nightdoor | ['NetMM', 'Suzafk'] | win.nightdoor | [] | 2024-10-29 | | | |
| | | Nighthawk | [] | win.nighthawk | [] | 2024-08-29 | | | |
| | | NightSky | ['Night Sky'] | win.nightsky | [] | 2022-09-20 | | | |
| | | Nimbo-C2 | [] | win.nimbo_c2 | [] | 2024-09-13 | | | |
| | | NimGrabber | [] | win.nimgrabber | [] | 2021-12-15 | | | |
| | | Nimplant | [] | win.nimplant | [] | 2023-10-12 | | | |
| | | Nimrev | [] | win.nimrev | [] | 2021-12-15 | | | |
| | | NimBlackout | [] | win.nim_blackout | [] | 2023-07-10 | | | |
| | | NineRAT | [] | win.ninerat | ['Silent Chollima'] | 2023-12-15 | | | |
| | | nitlove | [] | win.nitlove | [] | 2018-08-23 | | | |
| | | Nitol | [] | win.nitol | [] | 2023-03-20 | | | |
| | | Nocturnal Stealer | [] | win.nocturnalstealer | [] | 2018-06-13 | | | |
| | | Nokki | [] | win.nokki | ['APT37'] | 2020-07-24 | | | |
| | | Nosu | [] | win.nosu | [] | 2023-05-25 | | | |
| | | NoxPlayer | [] | win.noxplayer | [] | 2021-11-08 | | | |
| | | Nozelesn (Decryptor) | [] | win.nozelesn_decryptor | [] | 2018-07-09 | | | |
| | | No-Justice | [] | win.no_justice | [] | 2024-04-11 | | | |
| | | NSPX30 | [] | win.nspx30 | ['Blackwood'] | 2024-05-14 | | | |
| | | Ntospy | [] | win.ntospy | [] | 2024-06-05 | | | |
| | | NVISOSPIT | [] | win.nvisospit | [] | 2019-06-23 | | | |
| | | Nymaim | ['nymain'] | win.nymaim | [] | 2023-08-03 | | | |
| | | Nymaim2 | [] | win.nymaim2 | [] | 2024-09-04 | | | |
| | | OATBOAT | [] | win.oatboat | [] | 2024-10-25 | | | |
| | | Obscene | [] | win.obscene | [] | 2020-03-09 | | | |
| | | ObserverStealer | [] | win.observer_stealer | [] | 2023-06-27 | | | |
| | | Oceansalt | [] | win.oceansalt | [] | 2018-10-19 | | | |
| | | OddJob | [] | win.oddjob | ['Equation Group'] | 2017-05-01 | | | |
| | | Oderoor | ['Bobax', 'Kraken'] | win.oderoor | [] | 2024-02-21 | | | |
| | | Odinaff | [] | win.odinaff | [] | 2020-04-21 | | | |
| | | OLDBAIT | ['Sasfis'] | win.oldbait | ['APT28'] | 2022-05-04 | | | |
| | | Olympic Destroyer | ['SOURGRAPE'] | win.olympic_destroyer | [] | 2024-04-23 | | | |
| | | Ondritols | ['Onedrivetools'] | win.ondritols | [] | 2024-10-25 | | | |
| | | ONHAT | [] | win.onhat | [] | 2020-05-26 | | | |
| | | Oni | [] | win.oni | [] | 2019-08-14 | | | |
| | | OnionDuke | [] | win.onionduke | ['APT29'] | 2020-07-06 | | | |
| | | Opachki | [] | win.opachki | [] | 2018-06-28 | | | |
| | | OpenCarrot | [] | win.open_carrot | ['APT37'] | 2023-08-07 | | | |
| | | OpBlockBuster | [] | win.op_blockbuster | ['Lazarus Group'] | 2017-05-17 | | | |
| | | ORANGEADE | [] | win.orangeade | ['APT 30'] | 2019-04-17 | | | |
| | | OrcaRAT | [] | win.orcarat | [] | 2020-05-23 | | | |
| | | Orchard | ['Antavmu'] | win.orchard | [] | 2023-05-17 | | | |
| | | ORPCBackdoor | [] | win.orpcbackdoor | [] | 2024-09-13 | | | |
| | | Outlook Backdoor | ['FACADE'] | win.outlook_backdoor | ['Turla'] | 2020-07-24 | | | |
| | | Owlproxy | [] | win.owlproxy | [] | 2022-07-05 | | | |
| | | paladin | [] | win.paladin | ['Pitty Panda'] | 2018-09-30 | | | |
| | | PandaBanker | ['ZeusPanda'] | win.pandabanker | [] | 2022-01-25 | | | |
| | | Pandora | [] | win.pandora | [] | 2022-09-20 | | | |
| | | parasite_http | [] | win.parasite_http | [] | 2018-09-13 | | | |
| | | Pay2Key | ['Cobalt'] | win.pay2key | [] | 2021-05-13 | | | |
| | | PayloadBIN | [] | win.payloadbin | ['Evil Corp'] | 2022-07-01 | | | |
| | | PcShare | [] | win.pcshare | ['Pirate Panda'] | 2022-07-29 | | | |
| | | Penco | [] | win.penco | [] | 2018-07-24 | | | |
| | | PetrWrap | [] | win.petrwrap | [] | 2023-07-22 | | | |
| | | Petya | [] | win.petya | [] | 2023-10-30 | | | |
| | | pgift | ['ReRol'] | win.pgift | ['Pitty Panda'] | 2018-01-25 | | | |
| | | PhanDoor | [] | win.phandoor | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | PHOREAL | ['Rizzo'] | win.phoreal | ['APT32'] | 2022-03-08 | | | |
| | | Phorpiex | ['Trik', 'phorphiex'] | win.phorpiex | [] | 2023-11-13 | | | |
| | | PHOTOLITE | [] | win.photolite | [] | 2023-08-14 | | | |
| | | PhotoLoader | ['GZIPLOADER'] | win.photoloader | [] | 2024-04-03 | | | |
| | | PICKPOCKET | [] | win.pickpocket | ['APT34'] | 2021-06-29 | | | |
| | | Seduploader | ['jhuhugit', 'jkeyskw', 'downrage', 'carberplike', 'GAMEFISH'] | win.seduploader | ['APT28'] | 2024-07-10 | | | |
| | | SelfMake Loader | [] | win.selfmake | ['BlackTech'] | 2022-09-30 | | | |
| | | SendSafe | [] | win.sendsafe | [] | 2021-01-11 | | | |
| | | SepSys | ['Silvertor Ransomware'] | win.sepsys | [] | 2020-10-15 | | | |
| | | Sepulcher | [] | win.sepulcher | ['TA413'] | 2021-02-25 | | | |
| | | SessionManager | [] | win.session_manager | ['Gelsemium'] | 2022-07-05 | | | |
| | | Sfile | ['Morseop', 'Escal'] | win.sfile | [] | 2022-06-09 | | | |
| | | shadowhammer | ['DAYJOB'] | win.shadowhammer | ['Operation ShadowHammer'] | 2021-09-19 | | | |
| | | ShadyHammock | [] | win.shady_hammock | [] | 2024-10-29 | | | |
| | | Shakti | [] | win.shakti | [] | 2017-02-15 | | | |
| | | SHAPESHIFT | [] | win.shapeshift | ['APT33'] | 2017-09-29 | | | |
| | | shareip | ['remotecmd'] | win.shareip | ['UPS'] | 2018-04-17 | | | |
| | | SHARPKNOT | ['Bitrep'] | win.sharpknot | ['Silent Chollima'] | 2018-04-13 | | | |
| | | SHATTEREDGLASS | ['Unidentified 081'] | win.shatteredglass | ['Silent Chollima'] | 2024-08-01 | | | |
| | | Shifu | [] | win.shifu | [] | 2022-02-14 | | | |
| | | Shim RAT | [] | win.shimrat | ['Mofang'] | 2020-05-23 | | | |
| | | SHIPSHAPE | [] | win.shipshape | ['APT 30'] | 2022-08-25 | | | |
| | | Shujin | [] | win.shujin | [] | 2018-02-21 | | | |
| | | Shylock | ['Caphaw'] | win.shylock | [] | 2023-05-23 | | | |
| | | SideWalk | ['ScrambleCross'] | win.sidewalk | [] | 2024-09-02 | | | |
| | | SideWinder | [] | win.sidewinder | ['RAZOR TIGER', 'SloppyLemming'] | 2025-02-10 | | | |
| | | SiennaPurple | ['HolyLocker', 'H0lyGh0st'] | win.sienna_purple | [] | 2024-02-08 | | | |
| | | Silence | ['TrueBot'] | win.silence | ['Silence group', 'TA505'] | 2023-11-17 | | | |
| | | Silon | [] | win.silon | [] | 2018-06-28 | | | |
| | | SimpleFileMover | [] | win.simplefilemover | [] | 2020-05-27 | | | |
| | | Sinowal | ['Theola', 'Quarian', 'Mebroot', 'Anserin', 'Torpig'] | win.sinowal | [] | 2022-01-28 | | | |
| | | Sisfader | [] | win.sisfader | ['Hellsing'] | 2020-02-03 | | | |