| | | HermeticWiper | ['DriveSlayer', 'FoxBlade', 'KillDisk.NCV', 'NEARMISS'] | win.hermeticwiper | [] | 2024-04-23 | | | |
| | | HermeticWizard | [] | win.hermeticwizard | [] | 2023-03-20 | | | |
| | | HerpesBot | [] | win.herpes | [] | 2016-05-31 | | | |
| | | HesperBot | [] | win.hesperbot | [] | 2024-07-19 | | | |
| | | heyoka | [] | win.heyoka | ['Aoqin Dragon'] | 2025-09-01 | | | |
| | | HIGHNOTE | ['ChyNode'] | win.highnote | ['APT17'] | 2019-07-31 | | | |
| | | himan | [] | win.himan | [] | 2018-09-11 | | | |
| | | Himera Loader | [] | win.himera_loader | [] | 2020-05-18 | | | |
| | | Hive | [] | win.hive | [] | 2023-12-27 | | | |
| | | Hi-Zor RAT | [] | win.hi_zor_rat | [] | 2018-02-15 | | | |
| | | HLUX | [] | win.hlux | [] | 2016-04-26 | | | |
| | | Hodur | [] | win.hodur | ['MUSTANG PANDA'] | 2024-10-09 | | | |
| | | homefry | [] | win.homefry | ['Leviathan'] | 2020-05-23 | | | |
| | | HookInjEx | [] | win.hookinjex | [] | 2020-09-21 | | | |
| | | HOPLIGHT | ['HANGMAN'] | win.hoplight | ['Lazarus Group'] | 2020-08-13 | | | |
| | | Hopscotch | [] | win.hopscotch | [] | 2021-02-06 | | | |
| | | HOTCROISSANT | [] | win.hotcroissant | ['Lazarus Group'] | 2020-04-17 | | | |
| | | HOTWAX | [] | win.hotwax | ['Lazarus Group'] | 2023-08-31 | | | |
| | | HtBot | [] | win.htbot | [] | 2017-05-29 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | HttpBrowser | ['HttpDump'] | win.httpbrowser | ['Wekby', 'EMISSARY PANDA'] | 2022-07-05 | | | |
| | | httpdropper | ['httpdr0pper'] | win.httpdropper | [] | 2018-09-13 | | | |
| | | HTTP(S) uploader | [] | win.httpsuploader | ['Lazarus Group'] | 2023-11-27 | | | |
| | | http_troy | [] | win.http_troy | [] | 2018-09-19 | | | |
| | | Hunter Stealer | [] | win.hunter | [] | 2020-11-12 | | | |
| | | HuskLoader | [] | win.huskloader | [] | 2023-04-28 | | | |
| | | HyperBro | [] | win.hyperbro | ['EMISSARY PANDA'] | 2024-10-15 | | | |
| | | HZ RAT | [] | win.hzrat | [] | 2022-11-18 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2023-10-13 | | | |
| | | Icefog | ['Fucobha'] | win.icefog | [] | 2022-07-29 | | | |
| | | win.icexloader | [] | win.icexloader | [] | 2022-07-13 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2020-03-02 | | | |
| | | IconDown | [] | win.icondown | ['BlackTech'] | 2019-12-08 | | | |
| | | IconicStealer | [] | win.iconic_stealer | ['Lazarus Group'] | 2023-12-14 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | IISpy | ['BadIIS'] | win.iispy | [] | 2024-09-13 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Infy | ['Foudre'] | win.infy | [] | 2021-02-20 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16', 'APT16'] | 2025-10-01 | | | |
| | | IronWind | [] | win.ironwind | [] | 2023-11-14 | | | |
| | | IsaacWiper | ['LASAINRAW'] | win.isaacwiper | [] | 2023-05-21 | | | |
| | | ISMAgent | [] | win.ismagent | ['Greenbug', 'APT34'] | 2022-07-29 | | | |
| | | ISMDoor | [] | win.ismdoor | ['Greenbug'] | 2022-07-29 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsSpace | ['NfLog RAT'] | win.isspace | ['DragonOK', 'Samurai Panda'] | 2022-07-29 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | Jaff | [] | win.jaff | [] | 2023-02-21 | | | |
| | | Jaku | ['C3PRO-RACOON', 'EQUINOX', 'KCNA Infostealer', 'Reconcyc'] | win.jaku | ['DarkHotel'] | 2022-06-09 | | | |
| | | Jasus | [] | win.jasus | ['Cleaver'] | 2017-05-21 | | | |
| | | JessieConTea | [] | win.jessiecontea | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | JinxLoader | [] | win.jinxloader | [] | 2024-01-31 | | | |
| | | JLORAT | [] | win.jlorat | [] | 2023-04-26 | | | |
| | | Joanap | [] | win.joanap | ['Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JripBot | [] | win.jripbot | ['WildNeutron'] | 2020-03-13 | | | |
| | | JSSLoader | [] | win.jssloader | ['Anunak'] | 2023-09-13 | | | |
| | | Jupiter | ['EarlyRAT'] | win.jupiter | ['Silent Chollima'] | 2023-09-01 | | | |
| | | KAgent | [] | win.kagent | ['Cleaver'] | 2017-05-21 | | | |
| | | Kapeka | ['ICYWELL', 'KNUCKLETOUCH', 'QUEUESEED', 'WRONGSENS'] | win.kapeka | ['Sandworm'] | 2024-09-13 | | | |
| | | Karagany | ['Karagny'] | win.karagany | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2022-08-28 | | | |
| | | Karma | [] | win.karma | [] | 2022-04-24 | | | |
| | | KasperAgent | [] | win.kasperagent | [] | 2017-07-11 | | | |
| | | KDC Sponge | [] | win.kdcsponge | [] | 2021-12-07 | | | |
| | | Kegotip | [] | win.kegotip | [] | 2022-02-14 | | | |
| | | Kelihos | [] | win.kelihos | [] | 2021-07-02 | | | |
| | | KerrDown | [] | win.kerrdown | ['APT32'] | 2021-02-25 | | | |
| | | Ketrican | [] | win.ketrican | ['Mirage'] | 2021-02-25 | | | |
| | | Ketrum | [] | win.ketrum | ['Mirage'] | 2020-08-12 | | | |
| | | KeyBoy | ['TSSL'] | win.keyboy | ['Pirate Panda'] | 2020-06-18 | | | |
| | | Keyhole | [] | win.keyhole | [] | 2024-01-17 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | ['UPS'] | 2023-05-15 | | | |
| | | KGH_SPY | [] | win.kgh_spy | [] | 2021-07-20 | | | |
| | | KHRAT | [] | win.khrat | ['DragonOK'] | 2022-11-15 | | | |
| | | Kikothac | [] | win.kikothac | [] | 2018-09-06 | | | |
| | | KillAV | ['BURNTCIGAR'] | win.killav | [] | 2023-11-17 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | EternalPetya | ['ExPetr', 'Pnyetya', 'Petna', 'NotPetya', 'Nyetya', 'NonPetya', 'nPetya', 'Diskcoder.C', 'BadRabbit'] | win.eternal_petya | ['TeleBots', 'Sandworm'] | 2024-04-23 | | | |
| | | EtumBot | ['HighTide'] | win.etumbot | ['IXESHE'] | 2020-05-23 | | | |
| | | Evilbunny | [] | win.evilbunny | ['SNOWGLOBE'] | 2024-10-09 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | EvilPony | ['CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | Exaramel | [] | win.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | Excalibur | ['Sabresac', 'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Expiro | ['Xpiro'] | win.expiro | [] | 2023-08-31 | | | |
| | | ExplosiveRAT | [] | win.explosive_rat | [] | 2022-10-07 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | FakeRean | ['Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeTC | [] | win.faketc | [] | 2021-08-17 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |