| | | Petya | [] | win.petya | [] | 2023-10-30 | | | |
| | | pgift | ['ReRol'] | win.pgift | ['Pitty Panda'] | 2018-01-25 | | | |
| | | PhanDoor | [] | win.phandoor | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | Phobos | [] | win.phobos | [] | 2025-07-21 | | | |
| | | Phoenix Locker | [] | win.phoenix_locker | [] | 2025-03-07 | | | |
| | | PHOREAL | ['Rizzo'] | win.phoreal | ['APT32'] | 2022-03-08 | | | |
| | | Phorpiex | ['Tldr', 'Trik', 'TwizT', 'phorphiex'] | win.phorpiex | [] | 2026-05-05 | | | |
| | | PHOTOFORK | [] | win.photofork | [] | 2024-12-11 | | | |
| | | PHOTOLITE | [] | win.photolite | [] | 2023-08-14 | | | |
| | | PhotoLoader | ['GZIPLOADER'] | win.photoloader | [] | 2024-04-03 | | | |
| | | PICKPOCKET | [] | win.pickpocket | ['APT34'] | 2021-06-29 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2025-11-25 | | | |
| | | PILLOWMINT | [] | win.pillowmint | ['Anunak'] | 2023-05-23 | | | |
| | | PinchDuke | [] | win.pinchduke | ['APT29'] | 2022-11-15 | | | |
| | | pipcreat | [] | win.pipcreat | [] | 2018-09-11 | | | |
| | | PipeMagic | [] | win.pipemagic | [] | 2025-04-25 | | | |
| | | PipeMon | [] | win.pipemon | ['Winnti Umbrella'] | 2023-05-23 | | | |
| | | pirpi | ['SHOTPUT', 'CookieCutter'] | win.pirpi | ['UPS'] | 2020-05-23 | | | |
| | | Pitou | [] | win.pitou | [] | 2024-09-04 | | | |
| | | PittyTiger RAT | [] | win.pittytiger_rat | [] | 2018-01-19 | | | |
| | | PixyNetLoader | [] | win.pixynet_loader | ['APT28'] | 2026-03-26 | | | |
| | | Pkybot | ['Pykbot', 'TBag', 'Bublik'] | win.pkybot | [] | 2018-02-15 | | | |
| | | PLAINTEE | [] | win.plaintee | ['RANCOR'] | 2022-07-29 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2026-01-12 | | | |
| | | playwork | [] | win.playwork | [] | 2018-09-13 | | | |
| | | DynoWiper | [] | win.dynowiper | [] | 2026-02-25 | | | |
| | | Dyre | ['Dyreza'] | win.dyre | ['WIZARD SPIDER'] | 2024-05-15 | | | |
| | | EagerBee | ['Thumtais'] | win.eagerbee | [] | 2025-06-16 | | | |
| | | Earthworm | [] | win.earthworm | [] | 2026-01-16 | | | |
| | | EchoGather | [] | win.echo_gather | [] | 2026-01-05 | | | |
| | | Edam | ['SECONDBEST'] | win.edam | [] | 2024-12-09 | | | |
| | | EDDIESTEALER | [] | win.eddiestealer | [] | 2025-06-02 | | | |
| | | EDRSilencer | [] | win.edr_silencer | [] | 2024-11-07 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2024-08-19 | | | |
| | | ELECTRICFISH | [] | win.electricfish | ['Lazarus Group'] | 2023-02-21 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | Elirks | [] | win.elirks | [] | 2023-08-29 | | | |
| | | Elise | ['EVILNEST'] | win.elise | ['Lotus Blossom'] | 2021-05-25 | | | |
| | | Emdivi | [] | win.emdivi | ['Stone Panda'] | 2021-03-02 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2026-04-22 | | | |
| | | Enfal | ['Lurid'] | win.enfal | [] | 2022-08-30 | | | |
| | | Enigma Loader | [] | win.enigma_loader | [] | 2023-02-13 | | | |
| | | EntryShell | [] | win.entryshell | [] | 2025-10-29 | | | |
| | | Epsilon Red | ['BlackCocaine'] | win.epsilon_red | [] | 2025-07-28 | | | |
| | | EquationDrug | [] | win.equationdrug | ['Equation Group'] | 2022-05-23 | | | |
| | | Erbium Stealer | [] | win.erbium_stealer | [] | 2022-12-05 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | EternalPetya | ['ExPetr', 'Pnyetya', 'Petna', 'NotPetya', 'Nyetya', 'NonPetya', 'nPetya', 'Diskcoder.C', 'BadRabbit'] | win.eternal_petya | ['TeleBots', 'Sandworm'] | 2026-05-07 | | | |
| | | EtumBot | ['HighTide'] | win.etumbot | ['IXESHE'] | 2020-05-23 | | | |
| | | Evilbunny | [] | win.evilbunny | ['SNOWGLOBE'] | 2024-10-09 | | | |
| | | EvilConwi | [] | win.evilconwi | [] | 2025-06-30 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | EvilPony | ['CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | Exaramel | [] | win.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | Excalibur | ['Sabresac', 'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Expiro | ['Xpiro'] | win.expiro | [] | 2023-08-31 | | | |
| | | ExplosiveRAT | [] | win.explosive_rat | [] | 2022-10-07 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | FakeRean | ['Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeTC | [] | win.faketc | [] | 2021-08-17 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |
| | | FatalRat | ['Sainbox RAT'] | win.fatal_rat | [] | 2025-09-17 | | | |
| | | FatDuke | [] | win.fatduke | ['APT29'] | 2020-05-23 | | | |
| | | FCT | [] | win.fct | [] | 2020-02-10 | | | |
| | | FeedLoad | [] | win.feed_load | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Felismus | [] | win.felismus | ['Sowbug'] | 2017-11-21 | | | |
| | | fengine | [] | win.fengine | [] | 2022-08-22 | | | |
| | | Feodo | ['Cridex', 'Bugat'] | win.feodo | [] | 2025-07-14 | | | |
| | | Ficker Stealer | [] | win.fickerstealer | [] | 2022-11-09 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-08-25 | | | |
| | | Final1stSpy | [] | win.final1stspy | ['APT37'] | 2018-10-23 | | | |
| | | FindPOS | ['Poseidon'] | win.findpos | [] | 2021-09-19 | | | |
| | | FinFisher RAT | ['FinSpy'] | win.finfisher | [] | 2023-03-24 | | | |
| | | Fireball | [] | win.fireball | [] | 2017-07-11 | | | |
| | | Fire Chili | [] | win.firechili | ['Shell Crew'] | 2022-04-04 | | | |
| | | FishMaster | ['JollyJellyfish'] | win.fishmaster | ['Earth Lusca'] | 2023-04-28 | | | |
| | | FK_Undead | ['Undead'] | win.fk_undead | [] | 2024-10-14 | | | |
| | | Flagpro | ['BUSYICE'] | win.flagpro | ['BlackTech'] | 2023-05-21 | | | |
| | | Flame | ['sKyWIper'] | win.flame | [] | 2023-10-05 | | | |
| | | FLASHFLOOD | [] | win.flashflood | ['APT 30'] | 2022-08-25 | | | |
| | | FlashDevelop | [] | win.flash_develop | ['Handala'] | 2024-10-18 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | ['TA505'] | 2022-02-14 | | | |
| | | FlawedGrace | ['GraceWire'] | win.flawedgrace | ['TA505'] | 2024-08-29 | | | |
| | | FlokiBot | [] | win.floki_bot | [] | 2018-01-22 | | | |
| | | FlowerShop | [] | win.flowershop | [] | 2020-05-07 | | | |
| | | Floxif | [] | win.floxif | [] | 2024-12-06 | | | |
| | | Flusihoc | [] | win.flusihoc | [] | 2017-10-09 | | | |
| | | FlyingDutchman | [] | win.flying_dutchman | ['Calypso group'] | 2019-11-12 | | | |
| | | FoalShell | [] | win.foalshell | ['YoroTrooper'] | 2026-01-19 | | | |
| | | Fobber | [] | win.fobber | [] | 2017-08-01 | | | |
| | | Fog | [] | win.fog | [] | 2025-06-24 | | | |
| | | FONIX | [] | win.fonix | [] | 2021-05-04 | | | |
| | | ForestTiger | ['ScoringMathTea'] | win.forest_tiger | ['Lazarus Group'] | 2025-09-15 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-05-18 | | | |
| | | FormerFirstRAT | ['ffrat'] | win.former_first_rat | ['DragonOK', 'Samurai Panda'] | 2022-08-26 | | | |
| | | Freenki Loader | ['SHUTTERSPEED'] | win.freenki | ['APT37'] | 2023-08-17 | | | |