| | | REDSALT | ['Dipsind'] | win.redsalt | ['PLATINUM'] | 2020-01-20 | | | |
| | | REDSHAWL | [] | win.redshawl | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Redyms | [] | win.redyms | [] | 2018-10-18 | | | |
| | | Red Gambler | [] | win.red_gambler | [] | 2018-07-11 | | | |
| | | ReedBed | [] | win.reedbed | ['MALLARD SPIDER', 'UNC4393'] | 2025-03-28 | | | |
| | | Regin | [] | win.regin | [] | 2022-03-22 | | | |
| | | RegretLocker | [] | win.regretlocker | [] | 2023-05-25 | | | |
| | | win.rekoobe | ['tinyshell.win', 'tshd.win'] | win.rekoobew | ['FIN7'] | 2021-12-08 | | | |
| | | Rekt Loader | [] | win.rektloader | [] | 2020-07-15 | | | |
| | | RemCom | ['RemoteCommandExecution'] | win.remcom | [] | 2024-04-11 | | | |
| | | NetTraveler | ['TravNet'] | win.nettraveler | ['NetTraveler'] | 2022-10-06 | | | |
| | | NetWire RC | ['NetWeird', 'NetWire', 'Recam'] | win.netwire | ['APT33'] | 2024-11-25 | | | |
| | | NET-STAR | [] | win.net_star | [] | 2025-10-15 | | | |
| | | Neutrino | ['Kasidet'] | win.neutrino | [] | 2021-09-22 | | | |
| | | Neutrino POS | [] | win.neutrino_pos | [] | 2017-07-12 | | | |
| | | Nevada | [] | win.nevada | [] | 2024-02-02 | | | |
| | | NewBounce | [] | win.newbounce | [] | 2021-12-15 | | | |
| | | NewCore RAT | [] | win.newcore_rat | ['Hellsing'] | 2020-09-25 | | | |
| | | NewPass | [] | win.newpass | ['APT29', 'Turla'] | 2022-10-17 | | | |
| | | NewPosThings | [] | win.newposthings | [] | 2020-03-19 | | | |
| | | NewsReels | [] | win.newsreels | ['Comment Crew'] | 2018-02-10 | | | |
| | | NewCT | ['CT'] | win.new_ct | ['DragonOK'] | 2022-07-29 | | | |
| | | Nexster Bot | [] | win.nexster_bot | [] | 2017-04-29 | | | |
| | | Ngioweb | ['Grobios'] | win.ngioweb | [] | 2024-12-09 | | | |
| | | NightClub | [] | win.nightclub | ['MoustachedBouncer'] | 2023-08-11 | | | |
| | | Nightdoor | ['NetMM', 'Suzafk'] | win.nightdoor | [] | 2024-10-29 | | | |
| | | Nighthawk | [] | win.nighthawk | [] | 2024-08-29 | | | |
| | | NightSky | ['Night Sky'] | win.nightsky | [] | 2022-09-20 | | | |
| | | NikiHTTP | [] | win.nikihttp | ['Kimsuky'] | 2025-10-28 | | | |
| | | NikiTeaR | [] | win.nikitear | ['Kimsuky'] | 2025-11-19 | | | |
| | | Nimbo-C2 | [] | win.nimbo_c2 | [] | 2024-09-13 | | | |
| | | NimGrabber | [] | win.nimgrabber | [] | 2021-12-15 | | | |
| | | Nimplant | [] | win.nimplant | [] | 2023-10-12 | | | |
| | | Nimrev | [] | win.nimrev | [] | 2021-12-15 | | | |
| | | NimBlackout | [] | win.nim_blackout | [] | 2023-07-10 | | | |
| | | NineRAT | [] | win.ninerat | ['Silent Chollima'] | 2023-12-15 | | | |
| | | nitlove | [] | win.nitlove | [] | 2018-08-23 | | | |
| | | Nitol | [] | win.nitol | [] | 2023-03-20 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-05-21 | | | |
| | | Nitrogen Ransomware | [] | win.nitrogen_ransomware | [] | 2025-08-18 | | | |
| | | Nocturnal Stealer | [] | win.nocturnalstealer | [] | 2018-06-13 | | | |
| | | Nokki | [] | win.nokki | ['APT37'] | 2025-06-20 | | | |
| | | Nokoyawa Ransomware | [] | win.nokoyawa | [] | 2024-11-25 | | | |
| | | NOROBOT | ['BAITSWITCH'] | win.norobot | ['Callisto'] | 2025-10-22 | | | |
| | | Nosu | [] | win.nosu | [] | 2023-05-25 | | | |
| | | NoxPlayer | [] | win.noxplayer | [] | 2021-11-08 | | | |
| | | Nozelesn (Decryptor) | [] | win.nozelesn_decryptor | [] | 2018-07-09 | | | |
| | | No-Justice | [] | win.no_justice | [] | 2024-04-11 | | | |
| | | NSPX30 | [] | win.nspx30 | ['Blackwood'] | 2024-05-14 | | | |
| | | Ntospy | [] | win.ntospy | [] | 2024-06-05 | | | |
| | | Nullmixer | [] | win.nullmixer | [] | 2024-12-09 | | | |
| | | NVISOSPIT | [] | win.nvisospit | [] | 2019-06-23 | | | |
| | | Nymaim | ['nymain'] | win.nymaim | [] | 2023-08-03 | | | |
| | | Nymaim2 | [] | win.nymaim2 | [] | 2024-09-04 | | | |
| | | OATBOAT | [] | win.oatboat | [] | 2024-10-25 | | | |
| | | Obscene | [] | win.obscene | [] | 2020-03-09 | | | |
| | | ObserverStealer | [] | win.observer_stealer | [] | 2023-06-27 | | | |
| | | Oceansalt | [] | win.oceansalt | [] | 2018-10-19 | | | |
| | | OctoberSeventh | ['ESET Wiper'] | win.october_seventh | [] | 2024-12-16 | | | |
| | | Octowave Loader | [] | win.octowave | [] | 2025-04-01 | | | |
| | | OddJob | [] | win.oddjob | ['Equation Group'] | 2017-05-01 | | | |
| | | Oderoor | ['Bobax', 'Kraken'] | win.oderoor | [] | 2024-02-21 | | | |
| | | Odinaff | [] | win.odinaff | [] | 2020-04-21 | | | |
| | | OLDBAIT | ['Sasfis'] | win.oldbait | ['APT28'] | 2022-05-04 | | | |
| | | Olympic Destroyer | ['SOURGRAPE'] | win.olympic_destroyer | [] | 2024-04-23 | | | |
| | | Ondritols | ['Onedrivetools'] | win.ondritols | [] | 2024-10-25 | | | |
| | | ONHAT | [] | win.onhat | [] | 2020-05-26 | | | |
| | | Oni | [] | win.oni | [] | 2019-08-14 | | | |
| | | OnionDuke | [] | win.onionduke | ['APT29'] | 2020-07-06 | | | |
| | | OnlinerSpambot | ['SBot', 'Onliner'] | win.onliner | [] | 2023-01-25 | | | |
| | | Opachki | [] | win.opachki | [] | 2018-06-28 | | | |
| | | OpenCarrot | [] | win.open_carrot | ['APT37'] | 2023-08-07 | | | |
| | | OpBlockBuster | [] | win.op_blockbuster | ['Lazarus Group'] | 2017-05-17 | | | |
| | | ORANGEADE | [] | win.orangeade | ['APT 30'] | 2019-04-17 | | | |
| | | OrcaRAT | [] | win.orcarat | [] | 2020-05-23 | | | |
| | | Orchard | ['Antavmu'] | win.orchard | [] | 2023-05-17 | | | |
| | | ORPCBackdoor | [] | win.orpcbackdoor | [] | 2025-06-05 | | | |
| | | Oski Stealer | [] | win.oski | [] | 2025-05-01 | | | |
| | | Outlook Backdoor | ['FACADE'] | win.outlook_backdoor | ['Turla'] | 2020-07-24 | | | |
| | | Owlproxy | [] | win.owlproxy | [] | 2022-07-05 | | | |
| | | paladin | [] | win.paladin | ['Pitty Panda'] | 2018-09-30 | | | |
| | | PandaBanker | ['ZeusPanda'] | win.pandabanker | [] | 2022-01-25 | | | |
| | | Pandora | [] | win.pandora | [] | 2022-09-20 | | | |
| | | Parallax RAT | ['ParallaxRAT'] | win.parallax | [] | 2025-04-28 | | | |
| | | parasite_http | [] | win.parasite_http | [] | 2018-09-13 | | | |
| | | PATHLOADER | [] | win.pathloader | [] | 2025-04-25 | | | |
| | | PathWiper | [] | win.pathwiper | [] | 2025-06-05 | | | |
| | | Pay2Key | ['Cobalt'] | win.pay2key | [] | 2021-05-13 | | | |
| | | PayloadBIN | [] | win.payloadbin | ['Evil Corp'] | 2022-07-01 | | | |
| | | PcShare | [] | win.pcshare | ['Pirate Panda'] | 2022-07-29 | | | |
| | | PEBBLEDASH | [] | win.pebbledash | [] | 2025-05-23 | | | |
| | | Penco | [] | win.penco | [] | 2018-07-24 | | | |
| | | PetrWrap | [] | win.petrwrap | [] | 2023-07-22 | | | |
| | | Petya | [] | win.petya | [] | 2023-10-30 | | | |
| | | pgift | ['ReRol'] | win.pgift | ['Pitty Panda'] | 2018-01-25 | | | |
| | | PhanDoor | [] | win.phandoor | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-12-08 | | | |
| | | Phobos | [] | win.phobos | [] | 2025-07-21 | | | |
| | | Phoenix Locker | [] | win.phoenix_locker | [] | 2025-03-07 | | | |
| | | PHOREAL | ['Rizzo'] | win.phoreal | ['APT32'] | 2022-03-08 | | | |