| | | AbSent Loader | [] | win.absentloader | [] | 2020-05-18 | | | |
| | | ACBackdoor | [] | win.acbackdoor | [] | 2019-11-22 | | | |
| | | ACEHASH | [] | win.acehash | ['APT41'] | 2021-03-02 | | | |
| | | AcidBox | ['MagicScroll'] | win.acidbox | [] | 2020-08-14 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | Action RAT | [] | win.action_rat | ['SideCopy'] | 2024-10-21 | | | |
| | | Adhubllka | [] | win.adhubllka | [] | 2020-07-23 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2025-03-27 | | | |
| | | Afrodita | [] | win.afrodita | [] | 2020-03-27 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2026-05-05 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2024-11-25 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2020-11-09 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | AkdoorTea | [] | win.akdoortea | ['WageMole'] | 2025-10-20 | | | |
| | | Albaniiutas | ['BlueTraveller'] | win.albaniiutas | ['TA428'] | 2024-10-15 | | | |
| | | Project Alice | ['PrAlice', 'AliceATM'] | win.alice_atm | [] | 2020-02-27 | | | |
| | | Alina POS | ['alina_spark', 'katrina', 'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | ['OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | AlphaNC | [] | win.alphanc | ['Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Alureon | ['Olmarik', 'Pihar', 'TDL', 'TDSS', 'wowlik'] | win.alureon | [] | 2024-04-23 | | | |
| | | AMTsol | ['Adupihan'] | win.amtsol | ['PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2025-09-09 | | | |
| | | AnchorMTea | [] | win.anchormtea | ['Lazarus Group'] | 2025-09-09 | | | |
| | | Andardoor | ['ROCKHATCH'] | win.andardoor | ['Silent Chollima'] | 2023-10-11 | | | |
| | | Andromeda | ['Gamarue', 'B106-Gamarue', 'B67-SS-Gamarue', 'b66'] | win.andromeda | ['Operation C-Major'] | 2025-07-24 | | | |
| | | AndroMut | ['Gelup'] | win.andromut | ['TA505'] | 2023-08-03 | | | |
| | | Anel | ['UPPERCUT', 'lena'] | win.anel | ['Stone Panda'] | 2025-03-21 | | | |
| | | APERETIF | [] | win.aperetif | [] | 2023-03-20 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | ApolloShadow | [] | win.apollo_shadow | ['Turla'] | 2025-08-22 | | | |
| | | AppleJeus | [] | win.applejeus | ['Lazarus Group'] | 2024-11-29 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2025-06-11 | | | |
| | | ArcaneStealer | [] | win.arcane_stealer | [] | 2026-03-03 | | | |
| | | Archer RAT | ['RustyWater'] | win.archer_rat | [] | 2026-01-12 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | AresLoader | [] | win.aresloader | [] | 2023-04-22 | | | |
| | | Aria-body | [] | win.ariabody | ['Naikon'] | 2024-06-04 | | | |
| | | Arik Keylogger | ['Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | ['ArkeiStealer'] | win.arkei_stealer | [] | 2024-01-30 | | | |
| | | ARTFULPIE | [] | win.artfulpie | ['Lazarus Group'] | 2020-02-27 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-11-26 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | Ashen | ['AshTag'] | win.ashen | ['WIRTE'] | 2026-02-25 | | | |
| | | Asprox | ['Aseljo', 'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | Asruex | [] | win.asruex | ['DarkHotel'] | 2020-06-16 | | | |
| | | AstarionRAT | ['MIMICRAT'] | win.astarion_rat | [] | 2026-03-11 | | | |
| | | AstraLocker | [] | win.astralocker | [] | 2022-08-05 | | | |
| | | Atharvan | [] | win.atharvan | ['Silent Chollima'] | 2023-12-15 | | | |
| | | ATI-Agent | [] | win.ati_agent | ['APT 29'] | 2022-03-14 | | | |
| | | Atlantida | [] | win.atlantida | [] | 2024-09-23 | | | |
| | | AtlasAgent | [] | win.atlas_agent | [] | 2023-10-16 | | | |
| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2020-04-26 | | | |
| | | Atmosphere | [] | win.atmosphere | ['Silence group'] | 2019-05-10 | | | |
| | | ATMSpitter | [] | win.atmspitter | ['Cobalt'] | 2020-05-23 | | | |
| | | ATOMSILO | [] | win.atomsilo | [] | 2023-05-15 | | | |
| | | Attor | [] | win.attor | [] | 2022-12-12 | | | |
| | | AuKill | ['SophosKill'] | win.aukill | [] | 2023-04-25 | | | |
| | | Auriga | ['Riodrv'] | win.auriga | ['Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | ['OneKeyLocker'] | win.aurora | ['Oktropys'] | 2023-04-22 | | | |
| | | Avaddon | [] | win.avaddon | ['RIDDLE SPIDER'] | 2022-04-13 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2022-11-15 | | | |
| | | Aveo | [] | win.aveo | [] | 2020-05-23 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['ANTHROPOID SPIDER', 'Anunak'] | 2025-09-01 | | | |
| | | AvosLocker | [] | win.avos_locker | [] | 2022-10-14 | | | |
| | | Unidentified 061 | [] | win.avrecon | [] | 2019-07-31 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | Aytoke | [] | win.aytoke | [] | 2021-10-24 | | | |
| | | Azov Wiper | [] | win.azov_wiper | [] | 2023-01-25 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2024-11-25 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2024-09-13 | | | |
| | | BabyShark | ['LATEOP'] | win.babyshark | ['Kimsuky'] | 2025-06-11 | | | |
| | | Bachosens | [] | win.bachosens | [] | 2023-03-16 | | | |
| | | BACKBEND | [] | win.backbend | ['APT 30'] | 2019-04-17 | | | |
| | | BackConfig | [] | win.backconfig | ['VICEROY TIGER'] | 2022-07-29 | | | |
| | | backspace | ['Lecna', 'ZRLnk'] | win.backspace | ['APT 30'] | 2022-08-25 | | | |
| | | BackSwap | [] | win.backswap | [] | 2022-04-25 | | | |
| | | BADAUDIO | [] | win.badaudio | ['APT24'] | 2026-03-02 | | | |
| | | BADCALL | [] | win.badcall | ['Lazarus Group'] | 2024-11-29 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | ['Leviathan'] | 2019-03-25 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Chinoxy | [] | win.chinoxy | [] | 2022-08-28 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | ChiserClient | [] | win.chiser_client | ['Pirate Panda'] | 2022-03-30 | | | |
| | | ChrGetPdsi Stealer | [] | win.chrgetpdsi_stealer | [] | 2024-06-24 | | | |
| | | Chrysalis | [] | win.chrysalis | ['LOTUS PANDA'] | 2026-02-03 | | | |
| | | Chthonic | ['AndroKINS'] | win.chthonic | [] | 2021-09-19 | | | |