| | | CryptoMix | ['Azer', 'CryptFile2'] | win.cryptomix | [] | 2023-02-06 | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2024-11-25 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2024-11-25 | | | |
| | | Crytox | [] | win.crytox | [] | 2023-06-05 | | | |
| | | Cuba | ['COLDDRAW'] | win.cuba | [] | 2025-03-05 | | | |
| | | Cuegoe | [] | win.cuegoe | ['APT32'] | 2017-05-19 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | Cur1Downloader | [] | win.cur1_downloader | ['Lazarus Group'] | 2023-07-12 | | | |
| | | Curator | ['Ever101', 'SunnyDay'] | win.curator | [] | 2023-01-05 | | | |
| | | CurlBack RAT | [] | win.curlback | ['SideCopy'] | 2025-04-09 | | | |
| | | Cutwail | [] | win.cutwail | ['NARWHAL SPIDER'] | 2022-02-14 | | | |
| | | CycBot | [] | win.cycbot | [] | 2018-01-19 | | | |
| | | DADJOKE | [] | win.dadjoke | ['Leviathan'] | 2020-02-09 | | | |
| | | DADSTACHE | [] | win.dadstache | ['Leviathan'] | 2020-07-11 | | | |
| | | Dairy | [] | win.dairy | ['Comment Crew'] | 2018-02-10 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2026-06-30 | | | |
| | | danbot | [] | win.danbot | [] | 2022-02-14 | | | |
| | | DanderSpritz | ['Dsz'] | win.danderspritz | [] | 2025-10-20 | | | |
| | | Daolpu | [] | win.daolpu | [] | 2024-10-21 | | | |
| | | DarkBit | [] | win.darkbit | [] | 2023-08-21 | | | |
| | | DarkCloud Stealer | [] | win.darkcloud | [] | 2025-05-23 | | | |
| | | DARKDEW | [] | win.darkdew | [] | 2022-12-02 | | | |
| | | DarkLoader | [] | win.darkloader | [] | 2021-12-22 | | | |
| | | DarkMe | [] | win.darkme | [] | 2024-02-14 | | | |
| | | DarkMegi | [] | win.darkmegi | [] | 2018-06-28 | | | |
| | | Darkmoon | ['Chymine'] | win.darkmoon | [] | 2018-06-28 | | | |
| | | DarkPulsar | [] | win.darkpulsar | ['Equation Group'] | 2017-05-01 | | | |
| | | DarkRat | [] | win.darkrat | [] | 2022-04-15 | | | |
| | | DarkShell | [] | win.darkshell | [] | 2023-07-24 | | | |
| | | DarkSide | ['BlackMatter'] | win.darkside | [] | 2025-02-19 | | | |
| | | DarkTequila | [] | win.darktequila | [] | 2018-08-31 | | | |
| | | DarkVision RAT | [] | win.darkvision_rat | [] | 2024-11-25 | | | |
| | | DarkVNC | [] | win.darkvnc | [] | 2023-05-21 | | | |
| | | Daserf | ['Muirim', 'Nioupale'] | win.daserf | ['Tick'] | 2020-05-23 | | | |
| | | DataExfiltrator | ['FileSender'] | win.data_exfiltrator | [] | 2021-07-21 | | | |
| | | Datper | [] | win.datper | ['Tick'] | 2021-03-02 | | | |
| | | Daxin | ['DELIMEAT'] | win.daxin | [] | 2026-07-16 | | | |
| | | DDKeylogger | [] | win.ddkeylogger | [] | 2020-05-27 | | | |
| | | DDKONG | [] | win.ddkong | ['RANCOR'] | 2022-07-29 | | | |
| | | DEADWOOD | ['Agrius', 'SQLShred', 'DETBOSIT'] | win.deadwood | [] | 2023-01-19 | | | |
| | | DeathRansom | ['deathransom', 'wacatac'] | win.deathransom | [] | 2025-12-15 | | | |
| | | DECAF | [] | win.decaf | [] | 2021-11-03 | | | |
| | | DEEPDATA | [] | win.deepdata | [] | 2024-12-16 | | | |
| | | DEEPPOST | [] | win.deeppost | [] | 2024-11-25 | | | |
| | | defendnot | [] | win.defendnot | [] | 2026-06-10 | | | |
| | | Defray | ['Glushkov'] | win.defray | [] | 2021-02-09 | | | |
| | | Delta(Alfa,Bravo, ...) | [] | win.deltas | ['Lazarus Group'] | 2017-07-12 | | | |
| | | DeltaStealer | [] | win.deltastealer | [] | 2023-06-01 | | | |
| | | Dented | [] | win.dented | [] | 2017-11-16 | | | |
| | | DeputyDog | [] | win.deputydog | ['Aurora Panda'] | 2020-06-08 | | | |
| | | DeroHE | [] | win.derohe | [] | 2021-01-21 | | | |
| | | Derusbi | ['PHOTO'] | win.derusbi | ['APT41', 'APT17', 'Leviathan', 'Stone Panda'] | 2025-04-17 | | | |
| | | DevilsTongue | [] | win.devilstongue | ['Caramel Tsunami'] | 2025-05-09 | | | |
| | | DevOpt | [] | win.devopt | [] | 2023-04-25 | | | |
| | | Dexbia | ['CONIME'] | win.dexbia | ['Tonto Team'] | 2020-10-06 | | | |
| | | Dexter | ['LusyPOS'] | win.dexter | [] | 2022-11-12 | | | |
| | | Dharma | ['Arena', 'Crysis', 'Wadhrama', 'ncov'] | win.dharma | [] | 2024-11-26 | | | |
| | | Diavol | [] | win.diavol | [] | 2022-10-05 | | | |
| | | DICELOADER | ['Lizar'] | win.diceloader | [] | 2024-07-03 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | Disk Knight | [] | win.disk_knight | [] | 2023-11-13 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | Koadic | [] | win.koadic | ['APT28', 'Stone Panda'] | 2024-01-31 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2026-09-25 | | | |
| | | KOMPROGO | ['Splinter RAT'] | win.komprogo | ['APT32'] | 2019-06-17 | | | |
| | | Konni | [] | win.konni | ['APT37'] | 2025-09-09 | | | |
| | | KoobFace | [] | win.koobface | [] | 2022-01-28 | | | |
| | | Korlia | ['Bisonal'] | win.korlia | ['Tonto Team'] | 2023-09-20 | | | |
| | | KPOT Stealer | ['Khalesi', 'Kpot'] | win.kpot_stealer | [] | 2023-07-24 | | | |
| | | KrBanker | ['BlackMoon'] | win.krbanker | [] | 2024-04-23 | | | |
| | | KrDownloader | [] | win.krdownloader | [] | 2017-05-12 | | | |
| | | Kronos | ['Osiris'] | win.kronos | [] | 2023-05-21 | | | |
| | | KSL0T | [] | win.ksl0t | ['Turla'] | 2019-07-31 | | | |
| | | KTLVdoor | [] | win.ktlv_door | ['Earth Lusca'] | 2024-09-13 | | | |
| | | Kuaibu | ['Barys', 'Gofot', 'Kuaibpy'] | win.kuaibu8 | [] | 2017-03-29 | | | |
| | | KugelBlitz | [] | win.kugelblitz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Kuluoz | [] | win.kuluoz | [] | 2017-11-23 | | | |
| | | Kurton | [] | win.kurton | ['Comment Crew'] | 2018-02-13 | | | |
| | | Kutaki | [] | win.kutaki | [] | 2024-05-21 | | | |
| | | Kwampirs | [] | win.kwampirs | ['Orangeworm'] | 2022-03-15 | | | |
| | | Lalia Ransomware | [] | win.lalia_ransomware | [] | 2026-05-19 | | | |
| | | Lambert | ['Plexor'] | win.lambert | ['Longhorn'] | 2022-05-04 | | | |
| | | LambLoad | ['OfficeCertTea'] | win.lambload | ['Lazarus Group'] | 2025-09-15 | | | |
| | | Laplas (Reverseshell) | [] | win.laplas_shell | [] | 2025-11-13 | | | |
| | | LatentBot | [] | win.latentbot | [] | 2022-06-09 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2026-02-25 | | | |
| | | Laturo Stealer | [] | win.laturo | [] | 2019-10-31 | | | |
| | | LazarDoor | [] | win.lazardoor | ['Lazarus Group'] | 2023-12-27 | | | |
| | | LazarLoader | [] | win.lazarloader | ['Lazarus Group'] | 2023-06-29 | | | |
| | | KillDisk (Lazarus) | ['KillDisk.NBO'] | win.lazarus_killdisk | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Laziok | [] | win.laziok | [] | 2022-03-01 | | | |
| | | LCPDot | [] | win.lcpdot | ['Lazarus Group'] | 2023-08-03 | | | |
| | | LDR4 | [] | win.ldr4 | [] | 2023-01-13 | | | |
| | | Leash | [] | win.leash | ['Magic Hound'] | 2017-12-15 | | | |
| | | Lechiket | [] | win.lechiket | [] | 2024-04-29 | | | |
| | | LedgerChecker Stealer | [] | win.ledgerchecker | [] | 2026-05-06 | | | |