| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2020-04-26 | | | |
| | | ATMSpitter | [] | win.atmspitter | ['Cobalt'] | 2020-05-23 | | | |
| | | ATOMSILO | [] | win.atomsilo | [] | 2023-05-15 | | | |
| | | Attor | [] | win.attor | [] | 2022-12-12 | | | |
| | | AuKill | ['SophosKill'] | win.aukill | [] | 2023-04-25 | | | |
| | | Auriga | ['Riodrv'] | win.auriga | ['Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | ['OneKeyLocker'] | win.aurora | ['Oktropys'] | 2023-04-22 | | | |
| | | Avaddon | [] | win.avaddon | ['RIDDLE SPIDER'] | 2022-04-13 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2022-11-15 | | | |
| | | Aveo | [] | win.aveo | [] | 2020-05-23 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['ANTHROPOID SPIDER', 'Anunak'] | 2025-09-01 | | | |
| | | AvosLocker | [] | win.avos_locker | [] | 2022-10-14 | | | |
| | | Unidentified 061 | [] | win.avrecon | [] | 2019-07-31 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | Aytoke | [] | win.aytoke | [] | 2021-10-24 | | | |
| | | BunnyLoader | [] | win.bunnyloader | [] | 2024-03-25 | | | |
| | | ChrGetPdsi Stealer | [] | win.chrgetpdsi_stealer | [] | 2024-06-24 | | | |
| | | ChiserClient | [] | win.chiser_client | ['Pirate Panda'] | 2022-03-30 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | Chinoxy | [] | win.chinoxy | [] | 2022-08-28 | | | |
| | | Chinotto | [] | win.chinotto | ['APT37'] | 2023-11-22 | | | |
| | | Chinad | [] | win.chinad | [] | 2023-06-01 | | | |
| | | ChewBacca | [] | win.chewbacca | [] | 2018-04-26 | | | |
| | | CherryPicker POS | ['cherrypickerpos', 'cherrypicker', 'cherry_picker'] | win.cherry_picker | [] | 2022-12-01 | | | |
| | | Cinobi | [] | win.cinobi | [] | 2021-08-09 | | | |
| | | ChChes | ['HAYMAKER', 'Ham Backdoor'] | win.chches | ['Stone Panda'] | 2020-05-23 | | | |
| | | Charon | [] | win.charon | [] | 2025-12-30 | | | |
| | | Chaperone | ['Taj Mahal'] | win.chaperone | [] | 2020-08-13 | | | |
| | | CHAIRSMACK | [] | win.chairsmack | ['Charming Kitten'] | 2023-11-17 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2021-07-20 | | | |
| | | Chrysalis | [] | win.chrysalis | ['LOTUS PANDA'] | 2026-02-03 | | | |
| | | Chthonic | ['AndroKINS'] | win.chthonic | [] | 2021-09-19 | | | |
| | | Cicada3301 | [] | win.cicada3301 | [] | 2025-11-09 | | | |
| | | CHEESETRAY | ['CROWDEDFLOUNDER'] | win.cheesetray | ['Lazarus Group'] | 2020-02-27 | | | |
| | | Citadel | [] | win.citadel | [] | 2025-07-24 | | | |
| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clipog | [] | win.clipog | [] | 2023-10-20 | | | |
| | | Clop | [] | win.clop | ['TA505'] | 2025-11-09 | | | |
| | | CloudWizard | [] | win.cloudwizard | [] | 2023-06-01 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | ['meciv'] | win.cmstar | [] | 2022-07-25 | | | |
| | | CobInt | ['COOLPANTS'] | win.cobint | ['Cobalt'] | 2020-07-24 | | | |
| | | CadelSpy | ['Cadelle'] | win.cadelspy | [] | 2023-10-17 | | | |
| | | Casper | [] | win.casper | ['SNOWGLOBE'] | 2018-01-17 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2020-01-26 | | | |
| | | CARROTBALL | [] | win.carrotball | [] | 2020-02-04 | | | |
| | | CargoBay | [] | win.cargobay | [] | 2023-02-27 | | | |
| | | Careto | ['TheMask'] | win.careto | ['Careto'] | 2025-05-26 | | | |
| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2025-09-09 | | | |
| | | campoloader | [] | win.campoloader | [] | 2021-08-06 | | | |
| | | CALMTHORN | [] | win.calmthorn | ['Tonto Team'] | 2021-02-09 | | | |
| | | Carberp | [] | win.carberp | [] | 2025-09-09 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28', 'Sandworm'] | 2024-06-13 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | C2Looper | [] | win.c2looper | [] | 2026-08-20 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | BYEBY | [] | win.byeby | ['Calypso group', 'Karma Panda'] | 2022-07-25 | | | |
| | | Buzus | ['Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | Buterat | ['spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | BURNBOOK | [] | win.burnbook | ['UNC2970'] | 2025-11-21 | | | |
| | | Cerber | [] | win.cerber | [] | 2024-11-25 | | | |
| | | CEELOADER | [] | win.ceeloader | ['UNC2452'] | 2024-12-13 | | | |
| | | CCleaner Backdoor | ['DIRTCLEANER'] | win.ccleaner_backdoor | [] | 2024-12-06 | | | |
| | | CatB | [] | win.catb | [] | 2024-09-04 | | | |
| | | Catchamas | [] | win.catchamas | ['Thrip'] | 2018-06-25 | | | |
| | | Volgmer | ['FALLCHILL', 'Manuscrypt'] | win.volgmer | ['Lazarus Group'] | 2025-07-29 | | | |
| | | VSingle | [] | win.vsingle | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | vSkimmer | [] | win.vskimmer | [] | 2018-04-26 | | | |
| | | vxRat | [] | win.vx_rat | [] | 2025-10-20 | | | |
| | | Vyveva RAT | [] | win.vyveva | ['Lazarus Group'] | 2023-09-18 | | | |
| | | w32times | [] | win.w32times | ['UPS'] | 2018-04-13 | | | |
| | | WannaCryptor | ['Wana Decrypt0r', 'WannaCry', 'WannaCrypt', 'Wcry'] | win.wannacryptor | ['Lazarus Group'] | 2026-09-24 | | | |
| | | WannaHusky | [] | win.wannahusky | [] | 2022-04-08 | | | |
| | | Warezov | ['Stration', 'Opnis'] | win.warezov | [] | 2024-04-29 | | | |
| | | WarHawk | [] | win.warhawk | [] | 2024-08-29 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-11-25 | | | |
| | | WastedLoader | [] | win.wastedloader | [] | 2022-07-01 | | | |
| | | WastedLocker | [] | win.wastedlocker | [] | 2026-05-05 | | | |
| | | WaterMiner | [] | win.waterminer | [] | 2018-08-01 | | | |
| | | WaterSpout | [] | win.waterspout | ['IXESHE'] | 2017-05-21 | | | |
| | | WebbyTea | [] | win.webbytea | ['Lazarus Group'] | 2025-09-15 | | | |
| | | WebC2-AdSpace | [] | win.webc2_adspace | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Ausov | [] | win.webc2_ausov | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Bolid | [] | win.webc2_bolid | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Cson | [] | win.webc2_cson | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-GreenCat | [] | win.webc2_greencat | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Head | [] | win.webc2_head | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Kt3 | [] | win.webc2_kt3 | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Qbp | [] | win.webc2_qbp | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Rave | [] | win.webc2_rave | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Table | [] | win.webc2_table | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-UGX | [] | win.webc2_ugx | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Yahoo | [] | win.webc2_yahoo | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebMonitor RAT | ['RevCode'] | win.webmonitor | [] | 2020-11-19 | | | |