| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16', 'APT16'] | 2025-10-01 | | | |
| | | IronWind | [] | win.ironwind | [] | 2023-11-14 | | | |
| | | IsaacWiper | ['LASAINRAW'] | win.isaacwiper | [] | 2023-05-21 | | | |
| | | ISMAgent | [] | win.ismagent | ['Greenbug', 'APT34'] | 2022-07-29 | | | |
| | | ISMDoor | [] | win.ismdoor | ['Greenbug'] | 2022-07-29 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsSpace | ['NfLog RAT'] | win.isspace | ['DragonOK', 'Samurai Panda'] | 2022-07-29 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | Jaff | [] | win.jaff | [] | 2023-02-21 | | | |
| | | Jaku | ['C3PRO-RACOON', 'EQUINOX', 'KCNA Infostealer', 'Reconcyc'] | win.jaku | ['DarkHotel'] | 2022-06-09 | | | |
| | | Jasus | [] | win.jasus | ['Cleaver'] | 2017-05-21 | | | |
| | | JessieConTea | [] | win.jessiecontea | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | JinxLoader | [] | win.jinxloader | [] | 2024-01-31 | | | |
| | | JLORAT | [] | win.jlorat | [] | 2023-04-26 | | | |
| | | Joanap | [] | win.joanap | ['Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JripBot | [] | win.jripbot | ['WildNeutron'] | 2020-03-13 | | | |
| | | JSSLoader | [] | win.jssloader | ['Anunak'] | 2023-09-13 | | | |
| | | Jupiter | ['EarlyRAT'] | win.jupiter | ['Silent Chollima'] | 2023-09-01 | | | |
| | | KAgent | [] | win.kagent | ['Cleaver'] | 2017-05-21 | | | |
| | | Kapeka | ['ICYWELL', 'KNUCKLETOUCH', 'QUEUESEED', 'WRONGSENS'] | win.kapeka | ['Sandworm'] | 2024-09-13 | | | |
| | | Karagany | ['Karagny'] | win.karagany | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2022-08-28 | | | |
| | | Karma | [] | win.karma | [] | 2022-04-24 | | | |
| | | KasperAgent | [] | win.kasperagent | [] | 2017-07-11 | | | |
| | | KDC Sponge | [] | win.kdcsponge | [] | 2021-12-07 | | | |
| | | Kegotip | [] | win.kegotip | [] | 2022-02-14 | | | |
| | | Kelihos | [] | win.kelihos | [] | 2021-07-02 | | | |
| | | KerrDown | [] | win.kerrdown | ['APT32'] | 2021-02-25 | | | |
| | | Ketrican | [] | win.ketrican | ['Mirage'] | 2021-02-25 | | | |
| | | Ketrum | [] | win.ketrum | ['Mirage'] | 2020-08-12 | | | |
| | | KeyBoy | ['TSSL'] | win.keyboy | ['Pirate Panda'] | 2020-06-18 | | | |
| | | Keyhole | [] | win.keyhole | [] | 2024-01-17 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | ['UPS'] | 2023-05-15 | | | |
| | | KGH_SPY | [] | win.kgh_spy | [] | 2021-07-20 | | | |
| | | KHRAT | [] | win.khrat | ['DragonOK'] | 2022-11-15 | | | |
| | | Kikothac | [] | win.kikothac | [] | 2018-09-06 | | | |
| | | KillAV | ['BURNTCIGAR'] | win.killav | [] | 2023-11-17 | | | |
| | | QHost | ['Tolouge'] | win.qhost | [] | 2024-09-11 | | | |
| | | QtBot | ['qtproject'] | win.qtbot | [] | 2017-11-07 | | | |
| | | QuantLoader | [] | win.quantloader | ['Guru Spider'] | 2022-02-14 | | | |
| | | QUARTERRIG | ['MUSKYBEAT', 'STATICNOISE'] | win.quarterrig | ['APT29'] | 2023-10-18 | | | |
| | | QUICKMUTE | [] | win.quickmute | ['Tonto Team'] | 2022-07-13 | | | |
| | | QuiteRAT | ['Acres'] | win.quiterat | ['Silent Chollima'] | 2023-08-28 | | | |
| | | r980 | [] | win.r980 | [] | 2017-02-15 | | | |
| | | Racket Downloader | [] | win.racket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Rad | [] | win.rad | [] | 2021-10-24 | | | |
| | | Radamant | [] | win.radamant | [] | 2017-02-15 | | | |
| | | RadRAT | [] | win.radrat | [] | 2018-04-23 | | | |
| | | RagnarLocker | [] | win.ragnarlocker | [] | 2024-03-18 | | | |
| | | Rambo | ['brebsd'] | win.rambo | ['DragonOK'] | 2022-09-19 | | | |
| | | Ramdo | [] | win.ramdo | [] | 2016-04-20 | | | |
| | | Ramnit | ['Nimnul'] | win.ramnit | [] | 2023-11-14 | | | |
| | | Ramsay | [] | win.ramsay | ['DarkHotel'] | 2022-12-01 | | | |
| | | Ranbyus | [] | win.ranbyus | [] | 2024-02-13 | | | |
| | | Ransoc | [] | win.ransoc | [] | 2016-12-28 | | | |
| | | Ransomlock | ['WinLock'] | win.ransomlock | [] | 2018-01-02 | | | |
| | | Rapid Ransom | [] | win.rapid_ransom | [] | 2022-11-15 | | | |
| | | Rarog | [] | win.rarog | [] | 2019-01-06 | | | |
| | | rarstar | [] | win.rarstar | ['Tick'] | 2022-11-15 | | | |
| | | Ratankba | ['QUICKRIDE'] | win.ratankba | ['Lazarus Group'] | 2023-08-13 | | | |
| | | RatankbaPOS | ['RATANKBAPOS'] | win.ratankbapos | ['Lazarus Group'] | 2023-08-14 | | | |
| | | RATel | [] | win.ratel | [] | 2023-08-25 | | | |
| | | RawPOS | [] | win.rawpos | [] | 2020-04-17 | | | |
| | | RC2FM | [] | win.rc2fm | [] | 2022-08-25 | | | |
| | | RCtrl | [] | win.rctrl | ['APT 30'] | 2020-06-20 | | | |
| | | ReactorBot | [] | win.reactorbot | [] | 2017-06-07 | | | |
| | | Reaver | [] | win.reaver | [] | 2019-05-17 | | | |
| | | RedAlpha | [] | win.redalpha | [] | 2018-07-06 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2024-02-16 | | | |
| | | RedLeaves | ['BUGJUICE'] | win.redleaves | ['Stone Panda'] | 2022-06-22 | | | |
| | | REDPEPPER | ['Adupib'] | win.redpepper | ['PLATINUM'] | 2020-01-01 | | | |
| | | REDSALT | ['Dipsind'] | win.redsalt | ['PLATINUM'] | 2020-01-20 | | | |
| | | REDSHAWL | [] | win.redshawl | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Redyms | [] | win.redyms | [] | 2018-10-18 | | | |
| | | Red Gambler | [] | win.red_gambler | [] | 2018-07-11 | | | |
| | | Regin | [] | win.regin | [] | 2022-03-22 | | | |
| | | RegretLocker | [] | win.regretlocker | [] | 2023-05-25 | | | |
| | | win.rekoobe | ['tinyshell.win', 'tshd.win'] | win.rekoobew | ['FIN7'] | 2021-12-08 | | | |
| | | Rekt Loader | [] | win.rektloader | [] | 2020-07-15 | | | |
| | | RemCom | ['RemoteCommandExecution'] | win.remcom | [] | 2024-04-11 | | | |
| | | Remexi | ['CACHEMONEY'] | win.remexi | ['APT39', 'Chafer'] | 2023-05-25 | | | |
| | | Remsec | [] | win.remsec_strider | ['ProjectSauron'] | 2020-04-21 | | | |
| | | Remy | ['WINDSHIELD'] | win.remy | [] | 2020-05-23 | | | |
| | | Rerdom | [] | win.rerdom | [] | 2018-08-10 | | | |
| | | Retefe | ['Tsukuba', 'Werdlod'] | win.retefe | [] | 2019-05-23 | | | |
| | | Retro | [] | win.retro | ['DarkHotel'] | 2021-12-17 | | | |
| | | Revenant | [] | win.revenant | [] | 2023-04-03 | | | |
| | | Kingminer | [] | win.kingminer | [] | 2024-09-06 | | | |
| | | KINS | ['Kasper Internet Non-Security', 'Maple'] | win.kins | [] | 2018-11-08 | | | |
| | | KIVARS | [] | win.kivars | [] | 2021-04-06 | | | |
| | | KleptoParasite Stealer | ['Joglog', 'Parasite'] | win.kleptoparasite_stealer | [] | 2020-02-16 | | | |
| | | KLRD | [] | win.klrd | ['Anunak'] | 2019-03-05 | | | |
| | | Knight | ['Cyclops'] | win.knight | [] | 2024-09-06 | | | |