| | | pipcreat | [] | win.pipcreat | [] | 2018-09-11 | | | |
| | | PipeMon | [] | win.pipemon | ['Winnti Umbrella'] | 2023-05-23 | | | |
| | | pirpi | ['SHOTPUT', 'CookieCutter'] | win.pirpi | ['UPS'] | 2020-05-23 | | | |
| | | Pitou | [] | win.pitou | [] | 2024-09-04 | | | |
| | | PittyTiger RAT | [] | win.pittytiger_rat | [] | 2018-01-19 | | | |
| | | Pkybot | ['Pykbot', 'TBag', 'Bublik'] | win.pkybot | [] | 2018-02-15 | | | |
| | | PLAINTEE | [] | win.plaintee | ['RANCOR'] | 2022-07-29 | | | |
| | | playwork | [] | win.playwork | [] | 2018-09-13 | | | |
| | | PLEAD | ['DRAWDOWN', 'GOODTIMES', 'Linopid'] | win.plead | ['BlackTech'] | 2021-03-02 | | | |
| | | ployx | [] | win.ployx | [] | 2018-09-19 | | | |
| | | Plurox | [] | win.plurox | [] | 2019-09-25 | | | |
| | | pngdowner | [] | win.pngdowner | ['Putter Panda'] | 2022-08-30 | | | |
| | | PocoDown | ['Blitz', 'PocoDownloader'] | win.pocodown | ['APT28'] | 2020-03-25 | | | |
| | | Poison RAT | [] | win.poison_rat | [] | 2020-08-12 | | | |
| | | Poldat | ['Zlib', 'KABOB'] | win.poldat | ['Samurai Panda', 'Stone Panda'] | 2020-01-15 | | | |
| | | PolPo | [] | win.polpo | ['EMISSARY PANDA'] | 2024-10-15 | | | |
| | | PolyglotDuke | [] | win.polyglotduke | ['APT29'] | 2020-05-23 | | | |
| | | Polyglot | [] | win.polyglot_ransom | [] | 2017-02-15 | | | |
| | | PolyVice | ['Chily'] | win.polyvice | [] | 2024-02-08 | | | |
| | | Pony | ['Siplog', 'Fareit'] | win.pony | ['Cobalt'] | 2024-06-05 | | | |
| | | PoohMilk Loader | [] | win.poohmilk | ['APT37'] | 2017-11-16 | | | |
| | | PortDoor | [] | win.portdoor | [] | 2023-04-06 | | | |
| | | poscardstealer | [] | win.poscardstealer | [] | 2018-09-11 | | | |
| | | PoSlurp | ['PUNCHTRACK'] | win.poslurp | ['FIN8'] | 2021-03-24 | | | |
| | | PostNapTea | ['SIGNBT'] | win.postnaptea | ['Lazarus Group'] | 2023-12-19 | | | |
| | | Poweliks | [] | win.poweliks | [] | 2020-04-23 | | | |
| | | PowerDuke | [] | win.powerduke | ['APT 29'] | 2023-07-28 | | | |
| | | PowerLoader | [] | win.powerloader | [] | 2020-07-15 | | | |
| | | PowerPool | [] | win.powerpool | [] | 2018-09-07 | | | |
| | | PowerShellRunner | [] | win.powershellrunner | ['Turla'] | 2019-05-30 | | | |
| | | Powersniff | ['PUNCHBUGGY'] | win.powersniff | [] | 2020-06-03 | | | |
| | | Predator The Thief | [] | win.predator | [] | 2021-04-12 | | | |
| | | Prestige | [] | win.prestige | [] | 2023-05-25 | | | |
| | | Prikormka | [] | win.prikormka | ['Groundbait'] | 2023-06-01 | | | |
| | | Prilex | [] | win.prilex | [] | 2018-03-16 | | | |
| | | ProjectWood | [] | win.project_wood | [] | 2024-02-02 | | | |
| | | Prometei | [] | win.prometei | [] | 2024-10-24 | | | |
| | | Proto8RAT | [] | win.proto8_rat | [] | 2022-08-26 | | | |
| | | ProtonBot | [] | win.protonbot | [] | 2021-10-24 | | | |
| | | PSLogger | ['ECCENTRICBANDWAGON'] | win.pslogger | ['Lazarus Group'] | 2022-11-21 | | | |
| | | PC Surveillance System | ['PSS'] | win.pss | [] | 2018-02-07 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2023-11-22 | | | |
| | | PUBLOAD | ['ClaimLoader', 'PUBLOAD'] | win.pubload | [] | 2024-10-29 | | | |
| | | Punkey POS | ['poscardstealer', 'pospunk', 'punkeypos'] | win.punkey_pos | [] | 2023-02-21 | | | |
| | | PureLocker | [] | win.purelocker | [] | 2019-11-20 | | | |
| | | PurpleFox | [] | win.purplefox | [] | 2024-02-02 | | | |
| | | PurpleWave | [] | win.purplewave | [] | 2022-11-15 | | | |
| | | Pushdo | [] | win.pushdo | [] | 2021-02-25 | | | |
| | | Putabmow | [] | win.putabmow | [] | 2018-07-24 | | | |
| | | puzzlemaker | [] | win.puzzlemaker | ['[Unnamed group]'] | 2021-07-20 | | | |
| | | PvzOut | [] | win.pvzout | ['Cleaver'] | 2017-05-21 | | | |
| | | PwndLocker | ['ProLock'] | win.pwndlocker | [] | 2022-01-25 | | | |
| | | pwnpos | [] | win.pwnpos | [] | 2020-10-05 | | | |
| | | Qaccel | [] | win.qaccel | [] | 2018-07-24 | | | |
| | | Qadars | [] | win.qadars | [] | 2022-05-05 | | | |
| | | QHost | ['Tolouge'] | win.qhost | [] | 2024-09-11 | | | |
| | | QtBot | ['qtproject'] | win.qtbot | [] | 2017-11-07 | | | |
| | | QuantLoader | [] | win.quantloader | ['Guru Spider'] | 2022-02-14 | | | |
| | | QUARTERRIG | ['MUSKYBEAT', 'STATICNOISE'] | win.quarterrig | ['APT29'] | 2023-10-18 | | | |
| | | QUICKMUTE | [] | win.quickmute | ['Tonto Team'] | 2022-07-13 | | | |
| | | QuiteRAT | ['Acres'] | win.quiterat | ['Silent Chollima'] | 2023-08-28 | | | |
| | | r980 | [] | win.r980 | [] | 2017-02-15 | | | |
| | | Racket Downloader | [] | win.racket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Rad | [] | win.rad | [] | 2021-10-24 | | | |
| | | Radamant | [] | win.radamant | [] | 2017-02-15 | | | |
| | | RadRAT | [] | win.radrat | [] | 2018-04-23 | | | |
| | | RagnarLocker | [] | win.ragnarlocker | [] | 2024-03-18 | | | |
| | | Rambo | ['brebsd'] | win.rambo | ['DragonOK'] | 2022-09-19 | | | |
| | | Ramdo | [] | win.ramdo | [] | 2016-04-20 | | | |
| | | Ramnit | ['Nimnul'] | win.ramnit | [] | 2023-11-14 | | | |
| | | Ramsay | [] | win.ramsay | ['DarkHotel'] | 2022-12-01 | | | |
| | | Ranbyus | [] | win.ranbyus | [] | 2024-02-13 | | | |
| | | Ransoc | [] | win.ransoc | [] | 2016-12-28 | | | |
| | | RansomEXX | ['Ransom X', 'Defray777'] | win.ransomexx | ['GOLD DUPONT'] | 2023-06-09 | | | |
| | | Ransomlock | ['WinLock'] | win.ransomlock | [] | 2018-01-02 | | | |
| | | Rapid Ransom | [] | win.rapid_ransom | [] | 2022-11-15 | | | |
| | | Rarog | [] | win.rarog | [] | 2019-01-06 | | | |
| | | rarstar | [] | win.rarstar | ['Tick'] | 2022-11-15 | | | |
| | | Ratankba | ['QUICKRIDE'] | win.ratankba | ['Lazarus Group'] | 2023-08-13 | | | |
| | | RatankbaPOS | ['RATANKBAPOS'] | win.ratankbapos | ['Lazarus Group'] | 2023-08-14 | | | |
| | | RATel | [] | win.ratel | [] | 2023-08-25 | | | |
| | | RawPOS | [] | win.rawpos | [] | 2020-04-17 | | | |
| | | HyperSSL | ['FOCUSFJORD', 'Soldier', 'Sysupdate'] | win.hyperssl | ['EMISSARY PANDA'] | 2023-07-19 | | | |
| | | HZ RAT | [] | win.hzrat | [] | 2022-11-18 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2023-10-13 | | | |
| | | Icefog | ['Fucobha'] | win.icefog | [] | 2022-07-29 | | | |
| | | win.icexloader | [] | win.icexloader | [] | 2022-07-13 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2020-03-02 | | | |
| | | IconDown | [] | win.icondown | ['BlackTech'] | 2019-12-08 | | | |
| | | IconicStealer | [] | win.iconic_stealer | ['Lazarus Group'] | 2023-12-14 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | IISpy | ['BadIIS'] | win.iispy | [] | 2024-09-13 | | | |
| | | ImprudentCook | [] | win.imprudentcook | ['Lazarus Group'] | 2023-12-19 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Infy | ['Foudre'] | win.infy | [] | 2021-02-20 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16'] | 2020-04-16 | | | |
| | | IronWind | [] | win.ironwind | [] | 2023-11-14 | | | |