| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2024-04-11 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | Disk Knight | [] | win.disk_knight | [] | 2023-11-13 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | ['Shamoon'] | win.disttrack | ['Shamoon', 'Magic Hound', 'Timberworm', 'COBALT GIPSY'] | 2026-05-05 | | | |
| | | Divergent | ['Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | Dizzyvoid | ['Errorroot'] | win.dizzyvoid | ['Earth Lusca'] | 2024-03-25 | | | |
| | | DLRAT | [] | win.dlrat | [] | 2023-12-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2023-08-31 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSpionage | ['Agent Drable', 'AgentDrable', 'Webmask'] | win.dnspionage | ['DNSpionage'] | 2024-10-14 | | | |
| | | dnWipe | [] | win.dnwipe | [] | 2022-11-21 | | | |
| | | Minodo | [] | win.domino | [] | 2023-10-05 | | | |
| | | Donex | [] | win.donex | [] | 2024-04-29 | | | |
| | | DONOT | [] | win.donot | ['VICEROY TIGER'] | 2024-06-05 | | | |
| | | DoorMe | [] | win.doorme | [] | 2024-02-28 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2025-03-21 | | | |
| | | DoppelDridex | [] | win.doppeldridex | ['DOPPEL SPIDER'] | 2023-12-27 | | | |
| | | DoppelPaymer | ['Pay OR Grief'] | win.doppelpaymer | ['DOPPEL SPIDER'] | 2023-12-27 | | | |
| | | NgrBot | [] | win.dorkbot_ngrbot | [] | 2021-02-09 | | | |
| | | Dorshel | [] | win.dorshel | ['Energetic Bear'] | 2020-04-21 | | | |
| | | DOUBLEBACK | [] | win.doubleback | [] | 2023-05-16 | | | |
| | | DoubleFantasy | ['VALIDATOR'] | win.doublefantasy | ['Equation Group'] | 2022-05-23 | | | |
| | | DoubleFinger | [] | win.doublefinger | [] | 2023-08-03 | | | |
| | | DoublePulsar | [] | win.doublepulsar | ['Equation Group', 'UPS'] | 2022-06-08 | | | |
| | | Downdelph | ['DELPHACY'] | win.downdelph | ['APT28'] | 2021-04-20 | | | |
| | | Downeks | [] | win.downeks | [] | 2020-03-03 | | | |
| | | DownEx | [] | win.downex | ['UAC-0063'] | 2025-07-11 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2026-02-05 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DRATzarus | ['ThreatNeedle', 'ThreatNeedleTea'] | win.dratzarus | ['Lazarus Group'] | 2025-11-19 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2022-08-28 | | | |
| | | Dridex | [] | win.dridex | ['Evil Corp', 'INDRIK SPIDER', 'TA505'] | 2026-05-18 | | | |
| | | Dripion | ['Masson'] | win.dripion | [] | 2019-09-06 | | | |
| | | DROPSHOT | [] | win.dropshot | ['APT33'] | 2018-06-25 | | | |
| | | Dtrack | ['Preft', 'TroyRAT'] | win.dtrack | ['Lazarus Group', 'Silent Chollima'] | 2024-11-29 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | DuQu | [] | win.duqu | ['Unit 8200'] | 2025-02-28 | | | |
| | | DUSTMAN | [] | win.dustman | [] | 2023-01-19 | | | |
| | | DUSTPAN | ['StealthVector'] | win.dustpan | [] | 2024-10-21 | | | |
| | | DUSTTRAP | ['CurveLoad', 'DodgeBox', 'StealthReacher'] | win.dusttrap | ['APT41'] | 2024-11-04 | | | |
| | | DustyHammock | [] | win.dusty_hammock | [] | 2026-03-12 | | | |
| | | Duuzer | ['Escad'] | win.duuzer | ['Lazarus Group'] | 2020-12-08 | | | |
| | | DYEPACK | ['BanSwift', 'swift'] | win.dyepack | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Xloader | ['Formbook'] | osx.xloader | [] | 2026-05-18 | | | |
| | | TrickMo | [] | apk.trickmo | [] | 2026-05-18 | | | |
| | | ZionSiphon | [] | win.zionsiphon | [] | 2026-05-18 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2026-05-21 | | | |
| | | OSAMiner | [] | osx.osaminer | [] | 2026-05-18 | | | |
| | | Coruna | [] | ios.coruna | [] | 2026-05-08 | | | |
| | | PeerTime | [] | elf.peer_time | ['UAT-9244'] | 2026-05-11 | | | |
| | | Keenadu | [] | apk.keenadu | [] | 2026-05-13 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2026-05-13 | | | |
| | | Eternidade Stealer | [] | win.eternidade_stealer | [] | 2026-05-13 | | | |
| | | AppleChris | [] | win.apple_chris | ['CL-STA-1087'] | 2026-05-11 | | | |
| | | DohDoor | [] | win.dohdoor | [] | 2026-05-11 | | | |
| | | BoryptGrab | [] | win.boryptgrab | [] | 2026-05-11 | | | |
| | | TernDoor | [] | win.terndoor | ['UAT-9244'] | 2026-05-11 | | | |
| | | BruteEntry | [] | elf.brute_entry | ['UAT-9244'] | 2026-05-11 | | | |
| | | GRIDTIDE | [] | elf.gridtide | ['UNC2814'] | 2026-05-11 | | | |
| | | Tsundere | ['DinDoor'] | js.tsundere | ['MuddyWater'] | 2026-05-08 | | | |
| | | Loki (Mythic) | [] | win.loki_mythic | ['Mythic Likho'] | 2026-05-08 | | | |
| | | MicroStealer | [] | jar.microstealer | [] | 2026-05-08 | | | |
| | | LucidRook | [] | win.lucidrook | [] | 2026-05-08 | | | |
| | | LucidKnight | [] | win.lucidknight | [] | 2026-05-08 | | | |
| | | LucidPawn | [] | win.lucidpawn | [] | 2026-05-08 | | | |
| | | SpyFRPTunnel | ['fvncBot'] | apk.spyfrptunnel | [] | 2026-05-08 | | | |
| | | SafePay | [] | win.safepay | [] | 2026-05-08 | | | |
| | | Babuk | [] | elf.babuk | [] | 2026-05-08 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-05-08 | | | |
| | | DracuLoader | [] | win.dracu_loader | ['Earth Estries'] | 2026-05-08 | | | |
| | | SNAPPYBEE | ['Deed RAT', 'POISONPLUG.DEED'] | win.snappybee | ['Earth Estries'] | 2026-05-08 | | | |
| | | Phantom Stealer | [] | win.phantom_stealer | [] | 2026-05-08 | | | |
| | | GeckoStealer | [] | win.geckostealer | [] | 2026-05-06 | | | |
| | | fast16 | [] | win.fast16 | [] | 2026-05-06 | | | |
| | | ProSpy | [] | apk.prospy | ['HAZY TIGER'] | 2026-05-06 | | | |
| | | LedgerChecker Stealer | [] | win.ledgerchecker | [] | 2026-05-06 | | | |
| | | VoltStealer | [] | win.voltstealer | [] | 2026-05-06 | | | |
| | | SpankRAT | [] | win.spank_rat | [] | 2026-05-06 | | | |
| | | HanGhost | [] | win.hanghost | [] | 2026-05-06 | | | |
| | | AGEWHEEZE | [] | win.agewheeze | ['Cyber Serp'] | 2026-05-06 | | | |
| | | ABCDoor | [] | win.abcdoor | [] | 2026-05-06 | | | |
| | | SmartApeSG | ['HANEYMANEY', 'ZPHP'] | js.smartapesg | [] | 2026-05-05 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2026-05-05 | | | |
| | | QLNX | ['Quasar Linux RAT'] | elf.qlnx | [] | 2026-05-05 | | | |
| | | Macaw | [] | win.macaw | [] | 2026-05-05 | | | |
| | | SNOWBASIN | [] | py.snowbasin | ['UNC6692'] | 2026-05-05 | | | |
| | | POWERSTATS | ['Valyria'] | ps1.powerstats | ['MuddyWater'] | 2026-05-05 | | | |
| | | PowGoop | [] | ps1.powgoop | ['MuddyWater'] | 2026-05-05 | | | |
| | | STARWHALE | ['Canopy', 'SloughRAT'] | vbs.starwhale | ['MuddyWater'] | 2026-05-05 | | | |
| | | GRAMDOOR | ['Small Sieve'] | win.gramdoor | ['MuddyWater'] | 2026-05-05 | | | |
| | | RandomQuery | [] | ps1.randomquery | ['Kimsuky'] | 2026-05-05 | | | |
| | | RandomQuery | [] | vbs.randomquery | ['Kimsuky'] | 2026-05-05 | | | |
| | | Qilin | [] | elf.qilin | [] | 2026-05-05 | | | |
| | | SMOKEDHAM | [] | win.smokedham | [] | 2026-05-05 | | | |