| | | Sheriff | [] | win.sheriff | [] | 2026-10-09 | | | |
| | | Deputy | [] | win.deputy | [] | 2026-10-09 | | | |
| | | KV | [] | sh.kv | ['Volt Typhoon'] | 2026-10-09 | | | |
| | | SNAPPYBEE | ['Deed RAT', 'POISONPLUG.DEED', 'ShadowPad Light'] | win.snappybee | ['Earth Estries'] | 2026-10-28 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2026-10-09 | | | |
| | | Winnti | [] | osx.winnti | ['APT17'] | 2026-10-09 | | | |
| | | Winnti | [] | elf.winnti | ['Winnti Umbrella'] | 2026-10-09 | | | |
| | | Linodas | ['XDealer', 'DinodasRAT'] | elf.linodas | [] | 2026-10-09 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2026-10-09 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2026-10-09 | | | |
| | | HyperBro | [] | win.hyperbro | ['EMISSARY PANDA'] | 2026-10-09 | | | |
| | | VShell | [] | win.vshell | [] | 2026-10-09 | | | |
| | | Reshell | [] | win.reshell | ['GALLIUM'] | 2026-10-09 | | | |
| | | 2CLoader | [] | win.2cloader | [] | 2026-10-09 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2026-10-08 | | | |
| | | GOREVERSE | [] | elf.goreverse | ['UNC5174'] | 2026-10-08 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-10-08 | | | |
| | | VersaMem | [] | jar.versamem | ['Volt Typhoon'] | 2026-10-08 | | | |
| | | BloodAlchemy | [] | win.bloodalchemy | [] | 2026-10-08 | | | |
| | | Remus | [] | win.remus | [] | 2026-10-08 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2026-10-08 | | | |
| | | WarLock | [] | win.warlock | [] | 2026-10-08 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2026-10-08 | | | |
| | | Global | ['GLOBAL GROUP'] | win.global | [] | 2026-10-07 | | | |
| | | CountLoader | [] | win.count_loader | [] | 2026-10-07 | | | |
| | | FLEXRAT | [] | win.flexrat | [] | 2026-10-07 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-09-24 | | | |
| | | Ancient | ['ANCT'] | elf.ancient | [] | 2026-10-06 | | | |
| | | Bashlite | ['gayfgt', 'Gafgyt', 'qbot', 'torlus', 'lizkebab'] | elf.bashlite | [] | 2026-06-08 | | | |
| | | GobRAT | [] | elf.gobrat | [] | 2023-05-30 | | | |
| | | Hide and Seek | ['HNS'] | elf.hideandseek | [] | 2023-08-28 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2026-09-22 | | | |
| | | Nosedive | [] | elf.nosedive | ['Flax Typhoon'] | 2024-09-23 | | | |
| | | Persirai | [] | elf.persirai | [] | 2017-05-09 | | | |
| | | Satori | [] | elf.satori | [] | 2021-03-22 | | | |
| | | Azorult | ['PuffStealer', 'Rultazo'] | win.azorult | ['The Gorgon Group'] | 2026-06-02 | | | |
| | | Azov Wiper | [] | win.azov_wiper | [] | 2023-01-25 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2026-09-22 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2026-09-14 | | | |
| | | Bachosens | [] | win.bachosens | [] | 2023-03-16 | | | |
| | | BACKBEND | [] | win.backbend | ['APT 30'] | 2019-04-17 | | | |
| | | BackConfig | [] | win.backconfig | ['VICEROY TIGER'] | 2022-07-29 | | | |
| | | backspace | ['Lecna', 'ZRLnk'] | win.backspace | ['APT 30'] | 2022-08-25 | | | |
| | | BackSwap | [] | win.backswap | [] | 2022-04-25 | | | |
| | | BADAUDIO | [] | win.badaudio | ['APT24'] | 2026-03-02 | | | |
| | | BADCALL | [] | win.badcall | ['Lazarus Group'] | 2024-11-29 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | ['Leviathan'] | 2019-03-25 | | | |
| | | BADHATCH | [] | win.badhatch | ['FIN8'] | 2023-08-31 | | | |
| | | BadNews | [] | win.badnews | ['QUILTED TIGER'] | 2024-09-23 | | | |
| | | Bagle | [] | win.bagle | [] | 2021-12-31 | | | |
| | | BalkanDoor | [] | win.balkan_door | [] | 2019-09-03 | | | |
| | | Bamital | [] | win.bamital | [] | 2019-10-21 | | | |
| | | Banatrix | [] | win.banatrix | [] | 2017-05-22 | | | |
| | | Bandook | ['Bandok'] | win.bandook | ['Dark Caracal'] | 2025-12-08 | | | |
| | | bangat | [] | win.bangat | ['Comment Crew'] | 2018-09-11 | | | |
| | | Banjori | ['MultiBanker 2', 'BankPatch', 'BackPatcher'] | win.banjori | [] | 2018-07-31 | | | |
| | | Bankshot | ['COPPERHEDGE', 'FoggyBrass'] | win.bankshot | ['Lazarus Group'] | 2026-09-24 | | | |
| | | BanPolMex RAT | [] | win.banpolmex | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Bart | [] | win.bart | [] | 2022-02-14 | | | |
| | | BatchWiper | [] | win.batchwiper | [] | 2021-10-05 | | | |
| | | Batel | [] | win.batel | [] | 2020-04-21 | | | |
| | | BazarBackdoor | ['BEERBOT', 'KEGTAP', 'Team9Backdoor', 'bazaloader', 'bazarloader'] | win.bazarbackdoor | ['UNC1878'] | 2023-10-16 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2023-06-23 | | | |
| | | BEARDSHELL | [] | win.beardshell | ['APT28'] | 2026-03-11 | | | |
| | | win.beast | ['blacklockbit'] | win.beast | [] | 2026-09-07 | | | |
| | | BEATDROP | [] | win.beatdrop | ['APT29'] | 2024-02-02 | | | |
| | | Bedep | [] | win.bedep | [] | 2026-05-05 | | | |
| | | Bee | [] | win.bee | [] | 2021-01-29 | | | |
| | | BeepService | [] | win.beepservice | [] | 2020-05-27 | | | |
| | | BernhardPOS | [] | win.bernhardpos | [] | 2022-09-19 | | | |
| | | Bert | [] | win.bert | [] | 2025-09-23 | | | |
| | | BetaBot | ['Neurevt'] | win.betabot | [] | 2026-04-22 | | | |
| | | BHunt | [] | win.bhunt | [] | 2022-02-26 | | | |
| | | BH_A006 | [] | win.bh_a006 | [] | 2024-11-25 | | | |
| | | BI_D Ransomware | [] | win.bid_ransomware | [] | 2019-08-12 | | | |
| | | BillGates | [] | win.billgates | [] | 2023-08-31 | | | |
| | | BirdCall | [] | win.birdcall | ['APT37'] | 2026-06-18 | | | |
| | | Biscuit | ['zxdosml'] | win.biscuit | ['Comment Crew'] | 2018-02-10 | | | |
| | | BISTROMATH | [] | win.bistromath | ['Lazarus Group', 'Silent Chollima'] | 2023-09-22 | | | |
| | | BITSloth | [] | win.bitsloth | [] | 2024-08-29 | | | |
| | | Bitsran | ['SHADYCAT'] | win.bitsran | ['Lazarus Group'] | 2019-08-26 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2025-11-26 | | | |
| | | BKA Trojaner | ['bwin3_bka'] | win.bka_trojaner | [] | 2018-05-28 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2026-05-19 | | | |
| | | BlackByte | [] | win.blackbyte | [] | 2026-09-07 | | | |
| | | BLACKCOFFEE | ['PNGRAT', 'gresim', 'ZoxPNG'] | win.blackcoffee | ['APT41', 'Aurora Panda', 'Leviathan'] | 2025-04-17 | | | |
| | | BlackLotus | [] | win.blacklotus | [] | 2023-12-27 | | | |
| | | BlackMagic | [] | win.blackmagic | [] | 2022-12-08 | | | |
| | | BlackMatter | [] | win.blackmatter | [] | 2025-03-21 | | | |
| | | BlackPOS | ['Kaptoxa', 'MMon', 'POSWDS', 'Reedum'] | win.blackpos | [] | 2020-10-05 | | | |
| | | BlackShades | [] | win.blackshades | [] | 2020-05-23 | | | |
| | | BlackSoul | [] | win.blacksoul | [] | 2021-01-10 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2026-06-18 | | | |
| | | BleachGap | [] | win.bleachgap | [] | 2022-08-28 | | | |
| | | BLINDINGCAN | ['AIRDRY', 'ZetaNile'] | win.blindingcan | ['Lazarus Group'] | 2026-06-18 | | | |
| | | BlindEDR | [] | win.blind_edr | [] | 2025-10-23 | | | |
| | | Blister | ['COLORFAKE'] | win.blister | [] | 2023-11-14 | | | |
| | | BLUELIGHT | [] | win.bluelight | ['APT37'] | 2023-05-24 | | | |