| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | ['Shamoon'] | win.disttrack | ['Shamoon', 'Magic Hound', 'Timberworm', 'COBALT GIPSY'] | 2023-01-19 | | | |
| | | Divergent | ['Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | Dizzyvoid | ['Errorroot'] | win.dizzyvoid | ['Earth Lusca'] | 2024-03-25 | | | |
| | | DLRAT | [] | win.dlrat | [] | 2023-12-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2023-08-31 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSpionage | ['Agent Drable', 'AgentDrable', 'Webmask'] | win.dnspionage | ['DNSpionage'] | 2024-10-14 | | | |
| | | Minodo | [] | win.domino | [] | 2023-10-05 | | | |
| | | Donex | [] | win.donex | [] | 2024-04-29 | | | |
| | | DONOT | [] | win.donot | ['VICEROY TIGER'] | 2024-06-05 | | | |
| | | DoorMe | [] | win.doorme | [] | 2024-02-28 | | | |
| | | DoppelDridex | [] | win.doppeldridex | ['DOPPEL SPIDER'] | 2023-12-27 | | | |
| | | DoppelPaymer | ['Pay OR Grief'] | win.doppelpaymer | ['DOPPEL SPIDER'] | 2023-12-27 | | | |
| | | NgrBot | [] | win.dorkbot_ngrbot | [] | 2021-02-09 | | | |
| | | Dorshel | [] | win.dorshel | ['Energetic Bear'] | 2020-04-21 | | | |
| | | DOUBLEBACK | [] | win.doubleback | [] | 2023-05-16 | | | |
| | | DoubleFantasy | ['VALIDATOR'] | win.doublefantasy | ['Equation Group'] | 2022-05-23 | | | |
| | | DoubleFinger | [] | win.doublefinger | [] | 2023-08-03 | | | |
| | | DoublePulsar | [] | win.doublepulsar | ['Equation Group', 'UPS'] | 2022-06-08 | | | |
| | | Downdelph | ['DELPHACY'] | win.downdelph | ['APT28'] | 2021-04-20 | | | |
| | | Downeks | [] | win.downeks | [] | 2020-03-03 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2022-08-28 | | | |
| | | Dripion | ['Masson'] | win.dripion | [] | 2019-09-06 | | | |
| | | DROPSHOT | [] | win.dropshot | ['APT33'] | 2018-06-25 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | DUSTMAN | [] | win.dustman | [] | 2023-01-19 | | | |
| | | DUSTPAN | ['StealthVector'] | win.dustpan | [] | 2024-10-21 | | | |
| | | DUSTTRAP | ['CurveLoad', 'DodgeBox', 'StealthReacher'] | win.dusttrap | ['APT41'] | 2024-11-04 | | | |
| | | Duuzer | ['Escad'] | win.duuzer | ['Lazarus Group'] | 2020-12-08 | | | |
| | | DYEPACK | ['BanSwift', 'swift'] | win.dyepack | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Dyre | ['Dyreza'] | win.dyre | ['WIZARD SPIDER'] | 2024-05-15 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2024-08-19 | | | |
| | | ELECTRICFISH | [] | win.electricfish | ['Lazarus Group'] | 2023-02-21 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | Elirks | [] | win.elirks | [] | 2023-08-29 | | | |
| | | Elise | ['EVILNEST'] | win.elise | ['Lotus Blossom'] | 2021-05-25 | | | |
| | | Emdivi | [] | win.emdivi | ['Stone Panda'] | 2021-03-02 | | | |
| | | Enfal | ['Lurid'] | win.enfal | [] | 2022-08-30 | | | |
| | | Enigma Loader | [] | win.enigma_loader | [] | 2023-02-13 | | | |
| | | EntryShell | [] | win.entryshell | [] | 2024-10-18 | | | |
| | | EquationDrug | [] | win.equationdrug | ['Equation Group'] | 2022-05-23 | | | |
| | | Erbium Stealer | [] | win.erbium_stealer | [] | 2022-12-05 | | | |
| | | HALFRIG | [] | win.halfrig | ['APT29'] | 2023-06-01 | | | |
| | | Hamweq | [] | win.hamweq | [] | 2020-07-16 | | | |
| | | Hancitor | ['Chanitor'] | win.hancitor | [] | 2022-08-22 | | | |
| | | HARDRAIN | [] | win.hardrain | ['Lazarus Group'] | 2020-03-11 | | | |
| | | Harnig | ['Piptea'] | win.harnig | [] | 2018-01-22 | | | |
| | | Havex RAT | [] | win.havex_rat | ['Energetic Bear'] | 2022-03-25 | | | |
| | | HAWKBALL | [] | win.hawkball | [] | 2019-07-10 | | | |
| | | HazyLoad | [] | win.hazy_load | [' Silent Chollima'] | 2023-12-15 | | | |
| | | HDMR | ['GO-SPORT'] | win.hdmr | [] | 2019-12-18 | | | |
| | | HeaderTip | [] | win.headertip | [] | 2022-08-05 | | | |
| | | Helauto | [] | win.helauto | ['Comment Crew'] | 2018-02-10 | | | |
| | | HelloKitty | ['KittyCrypt'] | win.hellokitty | [] | 2023-12-27 | | | |
| | | Helminth | [] | win.helminth | ['APT34'] | 2021-06-29 | | | |
| | | Heloag | [] | win.heloag | [] | 2018-01-25 | | | |
| | | Heriplor | [] | win.heriplor | ['Energetic Bear'] | 2021-10-26 | | | |
| | | HermeticWiper | ['DriveSlayer', 'FoxBlade', 'KillDisk.NCV', 'NEARMISS'] | win.hermeticwiper | [] | 2024-04-23 | | | |
| | | HermeticWizard | [] | win.hermeticwizard | [] | 2023-03-20 | | | |
| | | HerpesBot | [] | win.herpes | [] | 2016-05-31 | | | |
| | | HesperBot | [] | win.hesperbot | [] | 2024-07-19 | | | |
| | | heyoka | [] | win.heyoka | ['Aoqin Dragon'] | 2025-09-01 | | | |
| | | HIGHNOTE | ['ChyNode'] | win.highnote | ['APT17'] | 2019-07-31 | | | |
| | | himan | [] | win.himan | [] | 2018-09-11 | | | |
| | | Himera Loader | [] | win.himera_loader | [] | 2020-05-18 | | | |
| | | Hive | [] | win.hive | [] | 2023-12-27 | | | |
| | | Hi-Zor RAT | [] | win.hi_zor_rat | [] | 2018-02-15 | | | |
| | | HLUX | [] | win.hlux | [] | 2016-04-26 | | | |
| | | Hodur | [] | win.hodur | ['MUSTANG PANDA'] | 2024-10-09 | | | |
| | | homefry | [] | win.homefry | ['Leviathan'] | 2020-05-23 | | | |
| | | HookInjEx | [] | win.hookinjex | [] | 2020-09-21 | | | |
| | | HOPLIGHT | ['HANGMAN'] | win.hoplight | ['Lazarus Group'] | 2020-08-13 | | | |
| | | Hopscotch | [] | win.hopscotch | [] | 2021-02-06 | | | |
| | | HOTCROISSANT | [] | win.hotcroissant | ['Lazarus Group'] | 2020-04-17 | | | |
| | | HOTWAX | [] | win.hotwax | ['Lazarus Group'] | 2023-08-31 | | | |
| | | HtBot | [] | win.htbot | [] | 2017-05-29 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | HttpBrowser | ['HttpDump'] | win.httpbrowser | ['Wekby', 'EMISSARY PANDA'] | 2022-07-05 | | | |
| | | httpdropper | ['httpdr0pper'] | win.httpdropper | [] | 2018-09-13 | | | |
| | | HTTP(S) uploader | [] | win.httpsuploader | ['Lazarus Group'] | 2023-11-27 | | | |
| | | http_troy | [] | win.http_troy | [] | 2018-09-19 | | | |
| | | Hunter Stealer | [] | win.hunter | [] | 2020-11-12 | | | |
| | | HuskLoader | [] | win.huskloader | [] | 2023-04-28 | | | |
| | | HyperBro | [] | win.hyperbro | ['EMISSARY PANDA'] | 2024-10-15 | | | |
| | | HZ RAT | [] | win.hzrat | [] | 2022-11-18 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2023-10-13 | | | |
| | | Icefog | ['Fucobha'] | win.icefog | [] | 2022-07-29 | | | |
| | | win.icexloader | [] | win.icexloader | [] | 2022-07-13 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2020-03-02 | | | |
| | | IconDown | [] | win.icondown | ['BlackTech'] | 2019-12-08 | | | |
| | | IconicStealer | [] | win.iconic_stealer | ['Lazarus Group'] | 2023-12-14 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | IISpy | ['BadIIS'] | win.iispy | [] | 2024-09-13 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Infy | ['Foudre'] | win.infy | [] | 2021-02-20 | | | |