| | | BlueNoroff | [] | win.bluenoroff | ['Lazarus Group'] | 2023-08-14 | | | |
| | | BOATLAUNCH | [] | win.boatlaunch | ['FIN7'] | 2022-04-07 | | | |
| | | Boaxxe | [] | win.boaxxe | [] | 2018-03-26 | | | |
| | | Bohmini | [] | win.bohmini | [] | 2018-07-24 | | | |
| | | BOLDMOVE | [] | win.boldmove | [] | 2023-01-20 | | | |
| | | Bolek | ['KBOT'] | win.bolek | [] | 2020-04-06 | | | |
| | | BookCodes RAT | ['BookCodesTea'] | win.bookcodesrat | ['Lazarus Group'] | 2023-07-24 | | | |
| | | BOOTWRECK | ['MBRkiller'] | win.bootwreck | ['Lazarus Group'] | 2019-10-12 | | | |
| | | BoryptGrab | [] | win.boryptgrab | [] | 2026-05-11 | | | |
| | | BottomLoader | [] | win.bottomloader | [] | 2023-12-15 | | | |
| | | Bouncer | [] | win.bouncer | ['Comment Crew'] | 2018-02-10 | | | |
| | | BoxCaon | [] | win.boxcaon | [] | 2022-10-25 | | | |
| | | BQTlock | [] | win.bqtlock | [] | 2025-09-30 | | | |
| | | Brambul | ['SORRYBRUTE'] | win.brambul | ['Lazarus Group'] | 2022-03-02 | | | |
| | | BravoNC | [] | win.bravonc | ['Lazarus Group'] | 2017-05-23 | | | |
| | | BrbBot | [] | win.brbbot | [] | 2022-02-09 | | | |
| | | BreachRAT | [] | win.breach_rat | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2022-01-28 | | | |
| | | BROLER | ['down_new'] | win.broler | ['Tick'] | 2020-06-02 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2026-09-07 | | | |
| | | Bruh Wiper | [] | win.bruh_wiper | [] | 2023-01-25 | | | |
| | | BrutPOS | [] | win.brutpos | [] | 2018-04-23 | | | |
| | | BS2005 | [] | win.bs2005 | ['Mirage'] | 2021-04-29 | | | |
| | | BTCWare | [] | win.btcware | [] | 2024-05-14 | | | |
| | | BUBBLEWRAP | [] | win.bubblewrap | ['Temper Panda'] | 2019-04-12 | | | |
| | | Buer | ['Buerloader', 'RustyBuer'] | win.buer | [] | 2023-01-31 | | | |
| | | BUGHATCH | [] | win.bughatch | [] | 2023-05-15 | | | |
| | | Buhtrap | ['Ratopak'] | win.buhtrap | ['BuhTrap'] | 2021-02-06 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2026-06-30 | | | |
| | | Bundestrojaner | ['R2D2', '0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2021-04-12 | | | |
| | | 3CX Backdoor | ['SUDDENICON'] | win.3cx_backdoor | ['Lazarus Group'] | 2025-09-15 | | | |
| | | 5.t Downloader | [] | win.5t_downloader | [] | 2024-06-05 | | | |
| | | 7ev3n | [] | win.7ev3n | [] | 2018-01-23 | | | |
| | | 8Base | [] | win.8base | [] | 2026-07-01 | | | |
| | | 9002 RAT | ['McRAT', 'Hydraq', 'HOMEUNIX'] | win.9002 | ['Aurora Panda', 'APT31', 'Group 27'] | 2024-07-22 | | | |
| | | AbaddonPOS | ['PinkKite', 'TinyPOS'] | win.abaddon_pos | [] | 2022-11-15 | | | |
| | | ABCsync | [] | win.abcsync | ['Actor240524'] | 2025-08-26 | | | |
| | | AbSent Loader | [] | win.absentloader | [] | 2020-05-18 | | | |
| | | ACBackdoor | [] | win.acbackdoor | [] | 2019-11-22 | | | |
| | | ACEHASH | [] | win.acehash | ['APT41'] | 2021-03-02 | | | |
| | | AcidBox | ['MagicScroll'] | win.acidbox | [] | 2020-08-14 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-09-25 | | | |
| | | Action RAT | [] | win.action_rat | ['SideCopy'] | 2024-10-21 | | | |
| | | Adhubllka | [] | win.adhubllka | [] | 2020-07-23 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2025-03-27 | | | |
| | | Afrodita | [] | win.afrodita | [] | 2020-03-27 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2026-09-07 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2024-11-25 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | AkdoorTea | [] | win.akdoortea | ['WageMole'] | 2025-10-20 | | | |
| | | Albaniiutas | ['BlueTraveller'] | win.albaniiutas | ['TA428'] | 2024-10-15 | | | |
| | | Project Alice | ['PrAlice', 'AliceATM'] | win.alice_atm | [] | 2020-02-27 | | | |
| | | Alina POS | ['alina_spark', 'katrina', 'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | ['OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | AlphaNC | [] | win.alphanc | ['Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Alureon | ['Olmarik', 'Pihar', 'TDL', 'TDSS', 'wowlik'] | win.alureon | [] | 2024-04-23 | | | |
| | | AMTsol | ['Adupihan'] | win.amtsol | ['PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2025-09-09 | | | |
| | | AnchorMTea | [] | win.anchormtea | ['Lazarus Group'] | 2025-09-09 | | | |
| | | Andardoor | ['ROCKHATCH'] | win.andardoor | ['Silent Chollima'] | 2023-10-11 | | | |
| | | Andromeda | ['Gamarue', 'B106-Gamarue', 'B67-SS-Gamarue', 'b66'] | win.andromeda | ['Operation C-Major'] | 2025-07-24 | | | |
| | | AndroMut | ['Gelup'] | win.andromut | ['TA505'] | 2023-08-03 | | | |
| | | Anel | ['UPPERCUT', 'lena'] | win.anel | ['Stone Panda'] | 2025-03-21 | | | |
| | | AnimateClipper | [] | win.animate_clipper | [] | 2026-08-03 | | | |
| | | APERETIF | [] | win.aperetif | [] | 2023-03-20 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | ApolloShadow | [] | win.apollo_shadow | ['Turla'] | 2025-08-22 | | | |
| | | AppleJeus | [] | win.applejeus | ['Lazarus Group'] | 2024-11-29 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2025-06-11 | | | |
| | | AppleChris | [] | win.apple_chris | ['CL-STA-1087'] | 2026-05-11 | | | |
| | | Archer RAT | ['RustyWater'] | win.archer_rat | [] | 2026-01-12 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | AresLoader | [] | win.aresloader | [] | 2023-04-22 | | | |
| | | Aria-body | [] | win.ariabody | ['Naikon'] | 2024-06-04 | | | |
| | | Arik Keylogger | ['Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | ['ArkeiStealer'] | win.arkei_stealer | [] | 2024-01-30 | | | |
| | | ARTFULPIE | [] | win.artfulpie | ['Lazarus Group'] | 2020-02-27 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-11-26 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | Ashen | ['AshTag'] | win.ashen | ['WIRTE'] | 2026-02-25 | | | |
| | | Asprox | ['Aseljo', 'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | Asruex | [] | win.asruex | ['DarkHotel'] | 2020-06-16 | | | |
| | | AstarionRAT | ['MIMICRAT'] | win.astarion_rat | [] | 2026-03-11 | | | |
| | | AstraLocker | [] | win.astralocker | [] | 2022-08-05 | | | |
| | | Atharvan | [] | win.atharvan | ['Silent Chollima'] | 2023-12-15 | | | |
| | | ATI-Agent | [] | win.ati_agent | ['APT 29'] | 2022-03-14 | | | |
| | | Atlantida | [] | win.atlantida | [] | 2024-09-23 | | | |
| | | AtlasAgent | [] | win.atlas_agent | [] | 2023-10-16 | | | |