| | | DragonForce | [] | win.dragonforce | [] | 2026-02-05 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DRATzarus | ['ThreatNeedle', 'ThreatNeedleTea'] | win.dratzarus | ['Lazarus Group'] | 2026-08-07 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2022-08-28 | | | |
| | | Dripion | ['Masson'] | win.dripion | [] | 2019-09-06 | | | |
| | | DROPSHOT | [] | win.dropshot | ['APT33'] | 2018-06-25 | | | |
| | | Dtrack | ['Preft', 'TroyRAT'] | win.dtrack | ['Lazarus Group', 'Silent Chollima'] | 2024-11-29 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | DuQu | [] | win.duqu | ['Unit 8200'] | 2025-02-28 | | | |
| | | DUSTMAN | [] | win.dustman | [] | 2023-01-19 | | | |
| | | DUSTPAN | ['StealthVector'] | win.dustpan | [] | 2024-10-21 | | | |
| | | DUSTTRAP | ['CurveLoad', 'DodgeBox', 'StealthReacher'] | win.dusttrap | ['APT41'] | 2024-11-04 | | | |
| | | DustyHammock | [] | win.dusty_hammock | [] | 2026-03-12 | | | |
| | | Duuzer | ['Escad'] | win.duuzer | ['Lazarus Group'] | 2020-12-08 | | | |
| | | DYEPACK | ['BanSwift', 'swift'] | win.dyepack | ['Lazarus Group'] | 2023-08-21 | | | |
| | | DynoWiper | [] | win.dynowiper | [] | 2026-02-25 | | | |
| | | Dyre | ['Dyreza'] | win.dyre | ['WIZARD SPIDER'] | 2024-05-15 | | | |
| | | EagerBee | ['Thumtais'] | win.eagerbee | [] | 2025-06-16 | | | |
| | | Earthworm | [] | win.earthworm | [] | 2026-01-16 | | | |
| | | EchoGather | [] | win.echo_gather | [] | 2026-01-05 | | | |
| | | Edam | ['SECONDBEST'] | win.edam | [] | 2024-12-09 | | | |
| | | EDDIESTEALER | [] | win.eddiestealer | [] | 2025-06-02 | | | |
| | | EDR-Freeze | [] | win.edr_freeze | [] | 2026-06-10 | | | |
| | | EDRSilencer | [] | win.edr_silencer | [] | 2024-11-07 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2024-08-19 | | | |
| | | ELECTRICFISH | [] | win.electricfish | ['Lazarus Group'] | 2023-02-21 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | Elirks | [] | win.elirks | [] | 2023-08-29 | | | |
| | | Elise | ['EVILNEST'] | win.elise | ['Lotus Blossom'] | 2021-05-25 | | | |
| | | Emdivi | [] | win.emdivi | ['Stone Panda'] | 2021-03-02 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2026-04-22 | | | |
| | | Enfal | ['Lurid'] | win.enfal | [] | 2022-08-30 | | | |
| | | Enigma Loader | [] | win.enigma_loader | [] | 2023-02-13 | | | |
| | | EntryShell | [] | win.entryshell | [] | 2025-10-29 | | | |
| | | Epsilon Red | ['BlackCocaine'] | win.epsilon_red | [] | 2025-07-28 | | | |
| | | EquationDrug | [] | win.equationdrug | ['Equation Group'] | 2022-05-23 | | | |
| | | Erbium Stealer | [] | win.erbium_stealer | [] | 2022-12-05 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | EternalPetya | ['ExPetr', 'Pnyetya', 'Petna', 'NotPetya', 'Nyetya', 'NonPetya', 'nPetya', 'Diskcoder.C', 'BadRabbit'] | win.eternal_petya | ['TeleBots', 'Sandworm'] | 2026-05-07 | | | |
| | | EtumBot | ['HighTide'] | win.etumbot | ['IXESHE'] | 2020-05-23 | | | |
| | | Evilbunny | [] | win.evilbunny | ['SNOWGLOBE'] | 2024-10-09 | | | |
| | | EvilConwi | [] | win.evilconwi | [] | 2025-06-30 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | EvilPony | ['CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | Exaramel | [] | win.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | Excalibur | ['Sabresac', 'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Expiro | ['Xpiro'] | win.expiro | [] | 2023-08-31 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | FakeRean | ['Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeTC | [] | win.faketc | [] | 2021-08-17 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |
| | | FatalRat | ['Sainbox RAT'] | win.fatal_rat | [] | 2025-09-17 | | | |
| | | Cobra Carbon System | ['Carbon'] | win.cobra | ['Turla'] | 2023-05-10 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2026-09-14 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2023-06-09 | | | |
| | | Collection RAT | [] | win.collection_rat | ['Silent Chollima'] | 2023-08-30 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2026-02-27 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2023-07-08 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-12-04 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-06-04 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2023-08-21 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | Corebot | [] | win.corebot | [] | 2024-11-25 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | CornFlake | [] | win.cornflake | ['APT29'] | 2026-08-03 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2025-06-20 | | | |
| | | Cotx RAT | [] | win.cotx | ['TA428'] | 2022-08-11 | | | |
| | | Cova | [] | win.cova | [] | 2022-12-07 | | | |
| | | Covid22 | [] | win.covid22 | [] | 2021-11-17 | | | |
| | | CrackedCantil | [] | win.crackedcantil | [] | 2024-12-09 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CRAT | [] | win.crat | ['Lazarus Group'] | 2026-08-07 | | | |
| | | Credraptor | [] | win.credraptor | ['TeleBots'] | 2021-03-04 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2026-01-28 | | | |
| | | Croxloader | [] | win.croxloader | [] | 2023-05-04 | | | |
| | | CruLoader | [] | win.cruloader | [] | 2024-02-06 | | | |
| | | Crutch | [] | win.crutch | ['Turla'] | 2021-05-03 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2025-01-07 | | | |
| | | CrypticConvo | [] | win.cryptic_convo | ['Scarlet Mimic'] | 2020-01-26 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2021-09-19 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |