| | | Gravity RAT | [] | apk.gravity_rat | [] | 2024-11-26 | | | |
| | | XiaoBa | [] | win.xiaoba | [] | 2020-03-19 | | | |
| | | BANSHEE | [] | osx.banshee | [] | 2024-11-26 | | | |
| | | LIGHTSPY | [] | osx.lightspy | [] | 2024-11-25 | | | |
| | | Melofee | ['Mélofée'] | elf.melofee | [] | 2024-11-25 | | | |
| | | Corebot | [] | win.corebot | [] | 2024-11-25 | | | |
| | | Dacls | ['MATA'] | win.dacls | ['Lazarus Group'] | 2024-11-25 | | | |
| | | LoJax | [] | win.lojax | ['APT28'] | 2024-11-25 | | | |
| | | MosaicRegressor | [] | win.mosaic_regressor | [] | 2024-11-25 | | | |
| | | TrickBot | ['Trickster', 'TheTrick', 'TrickLoader'] | win.trickbot | ['TA505', 'UNC1878', 'WIZARD SPIDER'] | 2024-11-25 | | | |
| | | PoshC2 | [] | win.poshc2 | ['APT33'] | 2024-11-25 | | | |
| | | NetWire RC | ['NetWeird', 'NetWire', 'Recam'] | win.netwire | ['APT33'] | 2024-11-25 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2024-11-25 | | | |
| | | BH_A006 | [] | win.bh_a006 | [] | 2024-11-25 | | | |
| | | DEEPPOST | [] | win.deeppost | [] | 2024-11-25 | | | |
| | | lightSpy | [] | ios.lightspy | [] | 2024-11-25 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2024-11-25 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2024-11-25 | | | |
| | | Cerber | [] | win.cerber | [] | 2024-11-25 | | | |
| | | Spora | [] | win.spora_ransom | [] | 2024-11-25 | | | |
| | | Locky | [] | win.locky | ['TA505'] | 2024-11-25 | | | |
| | | VirLock | [] | win.virlock | [] | 2024-11-25 | | | |
| | | PadCrypt | [] | win.padcrypt | [] | 2024-11-25 | | | |
| | | Snifula | ['Ursnif'] | win.snifula | [] | 2024-11-25 | | | |
| | | StrelaStealer | [] | win.strelastealer | [] | 2024-11-25 | | | |
| | | Dosia | ['DDOSIA'] | win.dosia | ['NoName057(16)'] | 2024-11-25 | | | |
| | | Gorilla | [] | elf.gorilla | [] | 2024-11-25 | | | |
| | | solarmarker | ['Jupyter', 'Polazert', 'Yellow Cockatoo'] | win.solarmarker | [] | 2024-08-29 | | | |
| | | SPICA | [] | win.spica | [] | 2024-11-25 | | | |
| | | RCS | ['Remote Control System', 'Crisis'] | win.rcs | ['Hacking Team', 'APT-C-34'] | 2024-11-25 | | | |
| | | DarkVision RAT | [] | win.darkvision_rat | [] | 2024-11-25 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | [] | 2024-11-25 | | | |
| | | EugenLoader | ['FakeBat', 'NUMOZYLOD', 'PaykLoader'] | ps1.eugenloader | ['APOTHECARY SPIDER', 'Storm-1113'] | 2024-11-25 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2024-11-25 | | | |
| | | Nokoyawa Ransomware | [] | win.nokoyawa | [] | 2024-11-25 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2024-11-25 | | | |
| | | Matanbuchus | [] | win.matanbuchus | [] | 2024-11-25 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2024-11-25 | | | |
| | | BOLDMOVE | [] | elf.boldmove | [] | 2024-11-17 | | | |
| | | MOONTAG | [] | win.moontag | [] | 2024-10-25 | | | |
| | | Running RAT | ['running_rat'] | win.runningrat | [] | 2024-11-15 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | ['APT41', 'EMISSARY PANDA', 'GALLIUM', 'HAFNIUM', 'Hurricane Panda', 'Leviathan'] | 2024-11-15 | | | |
| | | PortStarter | [] | win.portstarter | [] | 2024-10-15 | | | |
| | | Mozi | [] | elf.mozi | [] | 2024-11-12 | | | |
| | | reptile | [] | elf.reptile | [] | 2024-11-12 | | | |
| | | GobRAT | [] | elf.gobrat | [] | 2023-05-30 | | | |
| | | Hide and Seek | ['HNS'] | elf.hideandseek | [] | 2023-08-28 | | | |
| | | Nosedive | [] | elf.nosedive | ['Flax Typhoon'] | 2024-09-23 | | | |
| | | Persirai | [] | elf.persirai | [] | 2017-05-09 | | | |
| | | Satori | [] | elf.satori | [] | 2021-03-22 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2021-07-20 | | | |
| | | CHAIRSMACK | [] | win.chairsmack | ['Charming Kitten'] | 2023-11-17 | | | |
| | | Chaperone | ['Taj Mahal'] | win.chaperone | [] | 2020-08-13 | | | |
| | | ChChes | ['HAYMAKER', 'Ham Backdoor'] | win.chches | ['Stone Panda'] | 2020-05-23 | | | |
| | | CHEESETRAY | ['CROWDEDFLOUNDER'] | win.cheesetray | ['Lazarus Group'] | 2020-02-27 | | | |
| | | CherryPicker POS | ['cherrypickerpos', 'cherrypicker', 'cherry_picker'] | win.cherry_picker | [] | 2022-12-01 | | | |
| | | ChewBacca | [] | win.chewbacca | [] | 2018-04-26 | | | |
| | | Chinad | [] | win.chinad | [] | 2023-06-01 | | | |
| | | Chinotto | [] | win.chinotto | ['APT37'] | 2023-11-22 | | | |
| | | Chinoxy | [] | win.chinoxy | [] | 2022-08-28 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | ChiserClient | [] | win.chiser_client | ['Pirate Panda'] | 2022-03-30 | | | |
| | | ChrGetPdsi Stealer | [] | win.chrgetpdsi_stealer | [] | 2024-06-24 | | | |
| | | Chthonic | ['AndroKINS'] | win.chthonic | [] | 2021-09-19 | | | |
| | | Cinobi | [] | win.cinobi | [] | 2021-08-09 | | | |
| | | Citadel | [] | win.citadel | [] | 2021-06-29 | | | |
| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clipog | [] | win.clipog | [] | 2023-10-20 | | | |
| | | Clop | [] | win.clop | ['TA505'] | 2024-05-10 | | | |
| | | CLOUDBURST | ['NickelLoader'] | win.cloudburst | ['Lazarus Group'] | 2023-12-27 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2024-11-06 | | | |
| | | CloudWizard | [] | win.cloudwizard | [] | 2023-06-01 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | ['meciv'] | win.cmstar | [] | 2022-07-25 | | | |
| | | CobInt | ['COOLPANTS'] | win.cobint | ['Cobalt'] | 2020-07-24 | | | |
| | | Cobra Carbon System | ['Carbon'] | win.cobra | ['Turla'] | 2023-05-10 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2022-09-19 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2023-06-09 | | | |
| | | Collection RAT | [] | win.collection_rat | ['Silent Chollima'] | 2023-08-30 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2023-07-08 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-12-04 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2024-10-29 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2023-08-21 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2022-09-20 | | | |