| | | EDDIESTEALER | [] | win.eddiestealer | [] | 2025-06-02 | | | |
| | | EDRSilencer | [] | win.edr_silencer | [] | 2024-11-07 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2024-08-19 | | | |
| | | ELECTRICFISH | [] | win.electricfish | ['Lazarus Group'] | 2023-02-21 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | Elirks | [] | win.elirks | [] | 2023-08-29 | | | |
| | | Elise | ['EVILNEST'] | win.elise | ['Lotus Blossom'] | 2021-05-25 | | | |
| | | Emdivi | [] | win.emdivi | ['Stone Panda'] | 2021-03-02 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2026-04-22 | | | |
| | | Enfal | ['Lurid'] | win.enfal | [] | 2022-08-30 | | | |
| | | Enigma Loader | [] | win.enigma_loader | [] | 2023-02-13 | | | |
| | | EntryShell | [] | win.entryshell | [] | 2025-10-29 | | | |
| | | Epsilon Red | ['BlackCocaine'] | win.epsilon_red | [] | 2025-07-28 | | | |
| | | EquationDrug | [] | win.equationdrug | ['Equation Group'] | 2022-05-23 | | | |
| | | Erbium Stealer | [] | win.erbium_stealer | [] | 2022-12-05 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | EternalPetya | ['ExPetr', 'Pnyetya', 'Petna', 'NotPetya', 'Nyetya', 'NonPetya', 'nPetya', 'Diskcoder.C', 'BadRabbit'] | win.eternal_petya | ['TeleBots', 'Sandworm'] | 2026-05-07 | | | |
| | | EtumBot | ['HighTide'] | win.etumbot | ['IXESHE'] | 2020-05-23 | | | |
| | | Evilbunny | [] | win.evilbunny | ['SNOWGLOBE'] | 2024-10-09 | | | |
| | | EvilConwi | [] | win.evilconwi | [] | 2025-06-30 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | EvilPony | ['CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | Exaramel | [] | win.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | Excalibur | ['Sabresac', 'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Expiro | ['Xpiro'] | win.expiro | [] | 2023-08-31 | | | |
| | | ExplosiveRAT | [] | win.explosive_rat | [] | 2022-10-07 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | FakeRean | ['Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeTC | [] | win.faketc | [] | 2021-08-17 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |
| | | FatalRat | ['Sainbox RAT'] | win.fatal_rat | [] | 2025-09-17 | | | |
| | | Silence | ['TrueBot'] | win.silence | ['Silence group', 'TA505'] | 2025-11-09 | | | |
| | | SilentGh0st | [] | win.silentgh0st | [] | 2025-07-15 | | | |
| | | Silon | [] | win.silon | [] | 2018-06-28 | | | |
| | | Simda | ['iBank'] | win.simda | [] | 2025-03-07 | | | |
| | | SimpleFileMover | [] | win.simplefilemover | [] | 2020-05-27 | | | |
| | | Sisfader | [] | win.sisfader | ['Hellsing'] | 2020-02-03 | | | |
| | | SkinnyBoy | [] | win.skinnyboy | [] | 2021-08-06 | | | |
| | | skip-2.0 | [] | win.skip20 | ['APT41'] | 2019-12-08 | | | |
| | | Skipper | ['Kotel'] | win.skipper | ['Turla'] | 2023-02-13 | | | |
| | | Skynet | [] | win.skynet | [] | 2025-06-26 | | | |
| | | Skyplex | [] | win.skyplex | [] | 2017-02-15 | | | |
| | | Slave | [] | win.slave | [] | 2017-05-22 | | | |
| | | SLICKSHOES | [] | win.slickshoes | ['Lazarus Group'] | 2020-02-27 | | | |
| | | SLIMAGENT | [] | win.slimagent | ['APT28'] | 2026-03-11 | | | |
| | | SlipScreen | [] | win.slip_screen | ['RomCom'] | 2025-11-25 | | | |
| | | SlothfulMedia | ['QueenOfClubs'] | win.slothfulmedia | ['PowerPool'] | 2023-06-09 | | | |
| | | SlowStepper | [] | win.slowstepper | [] | 2025-01-27 | | | |
| | | SLUB | [] | win.slub | [] | 2020-12-16 | | | |
| | | smac | ['speccom'] | win.smac | [] | 2020-05-23 | | | |
| | | SManager | ['PhantomNet'] | win.smanager | [] | 2023-10-07 | | | |
| | | SmartEyes | [] | win.smarteyes | [] | 2021-01-29 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2026-05-05 | | | |
| | | Smominru | ['Ismo'] | win.smominru | [] | 2018-02-07 | | | |
| | | SnatchCrypto | ['BackbitingTea', 'msoRAT'] | win.snatchcrypto | ['Lazarus Group'] | 2025-11-05 | | | |
| | | SnatchLoader | [] | win.snatch_loader | [] | 2020-10-08 | | | |
| | | SNEEPY | ['ByeByeShell'] | win.sneepy | [] | 2017-11-17 | | | |
| | | Snifula | ['Ursnif'] | win.snifula | [] | 2024-11-25 | | | |
| | | Snojan | [] | win.snojan | [] | 2018-01-23 | | | |
| | | SnowFlake Stealer | [] | win.snowflake_stealer | [] | 2023-08-07 | | | |
| | | Sobig | ['Palyh'] | win.sobig | [] | 2019-05-20 | | | |
| | | Socelars | [] | win.socelars | [] | 2022-12-29 | | | |
| | | SocksBot | ['BIRDDOG', 'Nadrac'] | win.socksbot | ['Anunak'] | 2023-01-19 | | | |
| | | Solarbot | ['Napolar'] | win.solarbot | [] | 2020-02-26 | | | |
| | | SombRAT | [] | win.sombrat | ['[Unnamed group]'] | 2023-12-28 | | | |
| | | soraya | [] | win.soraya | [] | 2018-09-07 | | | |
| | | SoundBill | [] | win.soundbill | [] | 2025-08-21 | | | |
| | | SOUNDBITE | ['denis'] | win.soundbite | ['APT32'] | 2020-11-11 | | | |
| | | SPACESHIP | [] | win.spaceship | ['APT 30'] | 2022-08-25 | | | |
| | | SparrowDoor | [] | win.sparrow_door | ['GhostEmperor'] | 2025-10-29 | | | |
| | | Spectre Rat | [] | win.spectre | [] | 2024-06-24 | | | |
| | | Spedear | [] | win.spedear | ['Thrip'] | 2018-06-25 | | | |
| | | SPHijacker | [] | win.sphijacker | [] | 2023-05-04 | | | |
| | | SPICA | [] | win.spica | [] | 2024-11-25 | | | |
| | | SPIDERPIG RAT | [] | win.spider_rat | ['BlackTech'] | 2022-09-30 | | | |
| | | Splinter | [] | win.splinter | [] | 2025-01-15 | | | |
| | | splitloader | [] | win.splitloader | [] | 2025-11-25 | | | |
| | | Spora | [] | win.spora_ransom | [] | 2024-11-25 | | | |
| | | Spyder | [] | win.spyder | [] | 2025-03-21 | | | |
| | | Spyder Patchwork | [] | win.spyder_patchwork | ['QUILTED TIGER'] | 2024-08-29 | | | |
| | | SpyEye | [] | win.spyeye | [] | 2026-04-22 | | | |
| | | SpyGrace | ['SpyGlace'] | win.spygrace | ['APT-C-60'] | 2024-12-16 | | | |
| | | SquidLoader | [] | win.squidloader | [] | 2026-05-11 | | | |
| | | Squirrelwaffle | ['DatopLoader'] | win.squirrelwaffle | [] | 2022-07-19 | | | |
| | | SslMM | [] | win.sslmm | ['Naikon'] | | | | |
| | | SSLoad | [] | win.ssload | ['TA578'] | 2024-11-05 | | | |
| | | Stabuniq | [] | win.stabuniq | [] | | | | |
| | | StarCruft | [] | win.starcruft | ['APT37'] | 2018-04-26 | | | |
| | | StarsyPound | [] | win.starsypound | ['Comment Crew'] | 2018-02-10 | | | |
| | | StartPage | ['Easy Television Access Now'] | win.startpage | [] | 2019-02-27 | | | |
| | | Statc | ['Statc Stealer', 'Static Stealer'] | win.statc | [] | 2025-05-23 | | | |
| | | StealBit | ['Corrempa'] | win.stealbit | [] | 2022-09-26 | | | |
| | | Stealer0x3401 | [] | win.stealer_0x3401 | ['APT31'] | 2022-08-15 | | | |
| | | STEALHOOK | [] | win.stealhook | ['OilRig'] | 2024-11-04 | | | |
| | | StegoLoader | [] | win.stegoloader | [] | 2025-02-28 | | | |
| | | Stinger | [] | win.stinger | [] | 2018-03-19 | | | |