| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clipog | [] | win.clipog | [] | 2023-10-20 | | | |
| | | Clop | [] | win.clop | ['TA505'] | 2025-11-09 | | | |
| | | CLOUDBURST | ['NickelLoader'] | win.cloudburst | ['Lazarus Group'] | 2025-09-15 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2026-05-05 | | | |
| | | CloudWizard | [] | win.cloudwizard | [] | 2023-06-01 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | ['meciv'] | win.cmstar | [] | 2022-07-25 | | | |
| | | CobInt | ['COOLPANTS'] | win.cobint | ['Cobalt'] | 2020-07-24 | | | |
| | | Carberp | [] | win.carberp | [] | 2025-09-09 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2020-01-26 | | | |
| | | Casper | [] | win.casper | ['SNOWGLOBE'] | 2018-01-17 | | | |
| | | CARROTBALL | [] | win.carrotball | [] | 2020-02-04 | | | |
| | | CatB | [] | win.catb | [] | 2024-09-04 | | | |
| | | Catchamas | [] | win.catchamas | ['Thrip'] | 2018-06-25 | | | |
| | | CCleaner Backdoor | ['DIRTCLEANER'] | win.ccleaner_backdoor | [] | 2024-12-06 | | | |
| | | CargoBay | [] | win.cargobay | [] | 2023-02-27 | | | |
| | | CEELOADER | [] | win.ceeloader | ['UNC2452'] | 2024-12-13 | | | |
| | | Careto | ['TheMask'] | win.careto | ['Careto'] | 2025-05-26 | | | |
| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2025-09-09 | | | |
| | | Cerber | [] | win.cerber | [] | 2024-11-25 | | | |
| | | campoloader | [] | win.campoloader | [] | 2021-08-06 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2024-05-14 | | | |
| | | CALMTHORN | [] | win.calmthorn | ['Tonto Team'] | 2021-02-09 | | | |
| | | CadelSpy | ['Cadelle'] | win.cadelspy | [] | 2023-10-17 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28', 'Sandworm'] | 2024-06-13 | | | |
| | | Cactus | [] | win.cactus | [] | 2025-11-09 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2021-07-20 | | | |
| | | CHAIRSMACK | [] | win.chairsmack | ['Charming Kitten'] | 2023-11-17 | | | |
| | | Satori | [] | elf.satori | [] | 2021-03-22 | | | |
| | | 3CX Backdoor | ['SUDDENICON'] | win.3cx_backdoor | ['Lazarus Group'] | 2025-09-15 | | | |
| | | 5.t Downloader | [] | win.5t_downloader | [] | 2024-06-05 | | | |
| | | 7ev3n | [] | win.7ev3n | [] | 2018-01-23 | | | |
| | | 8Base | [] | win.8base | [] | 2026-07-01 | | | |
| | | 9002 RAT | ['McRAT', 'Hydraq', 'HOMEUNIX'] | win.9002 | ['Aurora Panda', 'APT31', 'Group 27'] | 2024-07-22 | | | |
| | | AbaddonPOS | ['PinkKite', 'TinyPOS'] | win.abaddon_pos | [] | 2022-11-15 | | | |
| | | ABCsync | [] | win.abcsync | ['Actor240524'] | 2025-08-26 | | | |
| | | AbSent Loader | [] | win.absentloader | [] | 2020-05-18 | | | |
| | | ACBackdoor | [] | win.acbackdoor | [] | 2019-11-22 | | | |
| | | ACEHASH | [] | win.acehash | ['APT41'] | 2021-03-02 | | | |
| | | AcidBox | ['MagicScroll'] | win.acidbox | [] | 2020-08-14 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-09-25 | | | |
| | | Action RAT | [] | win.action_rat | ['SideCopy'] | 2024-10-21 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2026-09-25 | | | |
| | | Adhubllka | [] | win.adhubllka | [] | 2020-07-23 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2025-03-27 | | | |
| | | Afrodita | [] | win.afrodita | [] | 2020-03-27 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2026-09-07 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2024-11-25 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2020-11-09 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | AkdoorTea | [] | win.akdoortea | ['WageMole'] | 2025-10-20 | | | |
| | | Albaniiutas | ['BlueTraveller'] | win.albaniiutas | ['TA428'] | 2024-10-15 | | | |
| | | Project Alice | ['PrAlice', 'AliceATM'] | win.alice_atm | [] | 2020-02-27 | | | |
| | | Alina POS | ['alina_spark', 'katrina', 'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | ['OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | AlphaNC | [] | win.alphanc | ['Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Alureon | ['Olmarik', 'Pihar', 'TDL', 'TDSS', 'wowlik'] | win.alureon | [] | 2024-04-23 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-09-25 | | | |
| | | AMTsol | ['Adupihan'] | win.amtsol | ['PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2025-09-09 | | | |
| | | AnchorMTea | [] | win.anchormtea | ['Lazarus Group'] | 2025-09-09 | | | |
| | | Andardoor | ['ROCKHATCH'] | win.andardoor | ['Silent Chollima'] | 2023-10-11 | | | |
| | | Andromeda | ['Gamarue', 'B106-Gamarue', 'B67-SS-Gamarue', 'b66'] | win.andromeda | ['Operation C-Major'] | 2025-07-24 | | | |
| | | AndroMut | ['Gelup'] | win.andromut | ['TA505'] | 2023-08-03 | | | |
| | | Anel | ['UPPERCUT', 'lena'] | win.anel | ['Stone Panda'] | 2025-03-21 | | | |
| | | AnimateClipper | [] | win.animate_clipper | [] | 2026-08-03 | | | |
| | | APERETIF | [] | win.aperetif | [] | 2023-03-20 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | ApolloShadow | [] | win.apollo_shadow | ['Turla'] | 2025-08-22 | | | |
| | | AppleJeus | [] | win.applejeus | ['Lazarus Group'] | 2024-11-29 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2025-06-11 | | | |
| | | AppleChris | [] | win.apple_chris | ['CL-STA-1087'] | 2026-05-11 | | | |
| | | ArcaneStealer | [] | win.arcane_stealer | [] | 2026-03-03 | | | |
| | | Archer RAT | ['RustyWater'] | win.archer_rat | [] | 2026-01-12 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | AresLoader | [] | win.aresloader | [] | 2023-04-22 | | | |
| | | Aria-body | [] | win.ariabody | ['Naikon'] | 2024-06-04 | | | |
| | | Arik Keylogger | ['Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | ['ArkeiStealer'] | win.arkei_stealer | [] | 2024-01-30 | | | |
| | | ARTFULPIE | [] | win.artfulpie | ['Lazarus Group'] | 2020-02-27 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-11-26 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | Ashen | ['AshTag'] | win.ashen | ['WIRTE'] | 2026-02-25 | | | |
| | | Asprox | ['Aseljo', 'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | Asruex | [] | win.asruex | ['DarkHotel'] | 2020-06-16 | | | |