| | | Chinoxy | [] | win.chinoxy | [] | 2022-08-28 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | ChiserClient | [] | win.chiser_client | ['Pirate Panda'] | 2022-03-30 | | | |
| | | ChrGetPdsi Stealer | [] | win.chrgetpdsi_stealer | [] | 2024-06-24 | | | |
| | | Chthonic | ['AndroKINS'] | win.chthonic | [] | 2021-09-19 | | | |
| | | Cicada3301 | [] | win.cicada3301 | [] | 2025-11-09 | | | |
| | | Cinobi | [] | win.cinobi | [] | 2021-08-09 | | | |
| | | Citadel | [] | win.citadel | [] | 2025-07-24 | | | |
| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clipog | [] | win.clipog | [] | 2023-10-20 | | | |
| | | Clop | [] | win.clop | ['TA505'] | 2025-11-09 | | | |
| | | CLOUDBURST | ['NickelLoader'] | win.cloudburst | ['Lazarus Group'] | 2025-09-15 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2025-11-28 | | | |
| | | CloudWizard | [] | win.cloudwizard | [] | 2023-06-01 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | ['meciv'] | win.cmstar | [] | 2022-07-25 | | | |
| | | CobInt | ['COOLPANTS'] | win.cobint | ['Cobalt'] | 2020-07-24 | | | |
| | | Cobra Carbon System | ['Carbon'] | win.cobra | ['Turla'] | 2023-05-10 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2022-09-19 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2023-06-09 | | | |
| | | Collection RAT | [] | win.collection_rat | ['Silent Chollima'] | 2023-08-30 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2025-11-25 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2023-07-08 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-12-04 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-06-04 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2023-08-21 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | Corebot | [] | win.corebot | [] | 2024-11-25 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2025-06-20 | | | |
| | | Cotx RAT | [] | win.cotx | ['TA428'] | 2022-08-11 | | | |
| | | Cova | [] | win.cova | [] | 2022-12-07 | | | |
| | | Covid22 | [] | win.covid22 | [] | 2021-11-17 | | | |
| | | CrackedCantil | [] | win.crackedcantil | [] | 2024-12-09 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CRAT | [] | win.crat | ['Lazarus Group'] | 2021-04-06 | | | |
| | | Credraptor | [] | win.credraptor | ['TeleBots'] | 2021-03-04 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |
| | | Croxloader | [] | win.croxloader | [] | 2023-05-04 | | | |
| | | CruLoader | [] | win.cruloader | [] | 2024-02-06 | | | |
| | | Crutch | [] | win.crutch | ['Turla'] | 2021-05-03 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2025-01-07 | | | |
| | | CrypticConvo | [] | win.cryptic_convo | ['Scarlet Mimic'] | 2020-01-26 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2021-09-19 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |
| | | CryptoMix | ['Azer', 'CryptFile2'] | win.cryptomix | [] | 2023-02-06 | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2024-11-25 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2024-11-25 | | | |
| | | Crytox | [] | win.crytox | [] | 2023-06-05 | | | |
| | | Cuba | ['COLDDRAW'] | win.cuba | [] | 2025-03-05 | | | |
| | | Cuegoe | [] | win.cuegoe | ['APT32'] | 2017-05-19 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | Cur1Downloader | [] | win.cur1_downloader | ['Lazarus Group'] | 2023-07-12 | | | |
| | | Curator | ['Ever101', 'SunnyDay'] | win.curator | [] | 2023-01-05 | | | |
| | | CurlBack RAT | [] | win.curlback | ['SideCopy'] | 2025-04-09 | | | |
| | | Cutwail | [] | win.cutwail | ['NARWHAL SPIDER'] | 2022-02-14 | | | |
| | | CycBot | [] | win.cycbot | [] | 2018-01-19 | | | |
| | | Bashlite | ['gayfgt', 'Gafgyt', 'qbot', 'torlus', 'lizkebab'] | elf.bashlite | [] | 2024-09-11 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2026-01-05 | | | |
| | | Hide and Seek | ['HNS'] | elf.hideandseek | [] | 2023-08-28 | | | |
| | | Nosedive | [] | elf.nosedive | ['Flax Typhoon'] | 2024-09-23 | | | |
| | | Persirai | [] | elf.persirai | [] | 2017-05-09 | | | |
| | | Satori | [] | elf.satori | [] | 2021-03-22 | | | |
| | | lukalocker | [] | win.lukalocker | [] | 2026-01-06 | | | |
| | | Unidentified 124 (Azure Functions) | [] | win.unidentified_124 | [] | 2026-01-05 | | | |
| | | ThemeForestRAT | ['TALLSHIP'] | win.theme_forest_rat | ['Lazarus Group'] | 2026-01-05 | | | |
| | | ZynorRAT | [] | win.zynor_rat | [] | 2026-01-05 | | | |
| | | SpyFRPTunnel | ['fvncBot'] | apk.spyfrptunnel | [] | 2026-01-05 | | | |
| | | Apollo | [] | win.apollo | [] | 2022-11-05 | | | |
| | | DeerStealer | [] | win.deerstealer | [] | 2026-01-05 | | | |
| | | SVCStealer | [] | win.svcstealer | [] | 2026-01-05 | | | |
| | | XoriumStealer | [] | win.xoriumstealer | [] | 2026-01-05 | | | |
| | | Shai-Hulud | [] | js.shai_hulud | [] | 2025-12-30 | | | |
| | | PhantomVAI | ['Caminho', 'Katz Stealer Loader', 'VMDetectLoader'] | win.phantomvai | [] | 2026-01-05 | | | |
| | | solarmarker | ['Jupyter', 'Polazert', 'Yellow Cockatoo'] | win.solarmarker | [] | 2025-12-30 | | | |
| | | TamperedChef | [] | win.tampered_chef | [] | 2025-12-30 | | | |
| | | POOLRAT | ['SIMPLESEA', 'SIMPLETEA'] | osx.poolrat | ['Lazarus Group'] | 2025-12-30 | | | |
| | | BADCALL | [] | elf.badcall | ['Lazarus Group'] | 2025-12-30 | | | |
| | | DCHSpy | [] | apk.dchspy | ['MuddyWater'] | 2025-12-30 | | | |
| | | Tonnerre | [] | win.tonnerre | ['Infy'] | 2025-12-22 | | | |
| | | Pyramid | [] | py.pyramid | [] | 2025-12-22 | | | |