| | | DevilsTongue | [] | win.devilstongue | ['Caramel Tsunami'] | 2025-05-09 | | | |
| | | DevOpt | [] | win.devopt | [] | 2023-04-25 | | | |
| | | Dexbia | ['CONIME'] | win.dexbia | ['Tonto Team'] | 2020-10-06 | | | |
| | | Dexter | ['LusyPOS'] | win.dexter | [] | 2022-11-12 | | | |
| | | Dharma | ['Arena', 'Crysis', 'Wadhrama', 'ncov'] | win.dharma | [] | 2024-11-26 | | | |
| | | Diavol | [] | win.diavol | [] | 2022-10-05 | | | |
| | | DICELOADER | ['Lizar'] | win.diceloader | [] | 2024-07-03 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2024-04-11 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | Disk Knight | [] | win.disk_knight | [] | 2023-11-13 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | ['Shamoon'] | win.disttrack | ['Shamoon', 'Magic Hound', 'Timberworm', 'COBALT GIPSY'] | 2023-01-19 | | | |
| | | Divergent | ['Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | Dizzyvoid | ['Errorroot'] | win.dizzyvoid | ['Earth Lusca'] | 2024-03-25 | | | |
| | | DLRAT | [] | win.dlrat | [] | 2023-12-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2023-08-31 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSpionage | ['Agent Drable', 'AgentDrable', 'Webmask'] | win.dnspionage | ['DNSpionage'] | 2024-10-14 | | | |
| | | dnWipe | [] | win.dnwipe | [] | 2022-11-21 | | | |
| | | Minodo | [] | win.domino | [] | 2023-10-05 | | | |
| | | Donex | [] | win.donex | [] | 2024-04-29 | | | |
| | | DONOT | [] | win.donot | ['VICEROY TIGER'] | 2024-06-05 | | | |
| | | DoorMe | [] | win.doorme | [] | 2024-02-28 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2025-03-21 | | | |
| | | DoppelDridex | [] | win.doppeldridex | ['DOPPEL SPIDER'] | 2023-12-27 | | | |
| | | DoppelPaymer | ['Pay OR Grief'] | win.doppelpaymer | ['DOPPEL SPIDER'] | 2023-12-27 | | | |
| | | NgrBot | [] | win.dorkbot_ngrbot | [] | 2021-02-09 | | | |
| | | Dorshel | [] | win.dorshel | ['Energetic Bear'] | 2020-04-21 | | | |
| | | DOUBLEBACK | [] | win.doubleback | [] | 2023-05-16 | | | |
| | | DoubleFantasy | ['VALIDATOR'] | win.doublefantasy | ['Equation Group'] | 2022-05-23 | | | |
| | | DoubleFinger | [] | win.doublefinger | [] | 2023-08-03 | | | |
| | | DoublePulsar | [] | win.doublepulsar | ['Equation Group', 'UPS'] | 2022-06-08 | | | |
| | | Downdelph | ['DELPHACY'] | win.downdelph | ['APT28'] | 2021-04-20 | | | |
| | | Downeks | [] | win.downeks | [] | 2020-03-03 | | | |
| | | DownEx | [] | win.downex | ['UAC-0063'] | 2025-07-11 | | | |
| | | DragonBreath | [] | win.dragonbreath | [] | 2025-11-18 | | | |
| | | DramNudge | [] | win.dramnudge | [] | 2018-07-24 | | | |
| | | DRATzarus | ['ThreatNeedle', 'ThreatNeedleTea'] | win.dratzarus | ['Lazarus Group'] | 2025-11-19 | | | |
| | | DreamBot | [] | win.dreambot | [] | 2022-08-28 | | | |
| | | Dridex | [] | win.dridex | ['Evil Corp', 'INDRIK SPIDER', 'TA505'] | 2024-04-15 | | | |
| | | Dripion | ['Masson'] | win.dripion | [] | 2019-09-06 | | | |
| | | DROPSHOT | [] | win.dropshot | ['APT33'] | 2018-06-25 | | | |
| | | Dtrack | ['Preft', 'TroyRAT'] | win.dtrack | ['Lazarus Group', 'Silent Chollima'] | 2024-11-29 | | | |
| | | DUBrute | [] | win.dubrute | [] | 2018-09-13 | | | |
| | | DuQu | [] | win.duqu | ['Unit 8200'] | 2025-02-28 | | | |
| | | DUSTMAN | [] | win.dustman | [] | 2023-01-19 | | | |
| | | DUSTPAN | ['StealthVector'] | win.dustpan | [] | 2024-10-21 | | | |
| | | DUSTTRAP | ['CurveLoad', 'DodgeBox', 'StealthReacher'] | win.dusttrap | ['APT41'] | 2024-11-04 | | | |
| | | Duuzer | ['Escad'] | win.duuzer | ['Lazarus Group'] | 2020-12-08 | | | |
| | | DYEPACK | ['BanSwift', 'swift'] | win.dyepack | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Dyre | ['Dyreza'] | win.dyre | ['WIZARD SPIDER'] | 2024-05-15 | | | |
| | | EagerBee | ['Thumtais'] | win.eagerbee | [] | 2025-06-16 | | | |
| | | EchoGather | [] | win.echo_gather | [] | 2026-01-05 | | | |
| | | Edam | ['SECONDBEST'] | win.edam | [] | 2024-12-09 | | | |
| | | EDDIESTEALER | [] | win.eddiestealer | [] | 2025-06-02 | | | |
| | | EDRSilencer | [] | win.edr_silencer | [] | 2024-11-07 | | | |
| | | EHDevel | [] | win.ehdevel | [] | 2024-08-19 | | | |
| | | ELECTRICFISH | [] | win.electricfish | ['Lazarus Group'] | 2023-02-21 | | | |
| | | ElectricPowder | [] | win.electric_powder | [] | 2019-02-14 | | | |
| | | Elirks | [] | win.elirks | [] | 2023-08-29 | | | |
| | | Elise | ['EVILNEST'] | win.elise | ['Lotus Blossom'] | 2021-05-25 | | | |
| | | Emdivi | [] | win.emdivi | ['Stone Panda'] | 2021-03-02 | | | |
| | | NetTraveler | ['TravNet'] | win.nettraveler | ['NetTraveler'] | 2022-10-06 | | | |
| | | NetWire RC | ['NetWeird', 'NetWire', 'Recam'] | win.netwire | ['APT33'] | 2024-11-25 | | | |
| | | NET-STAR | [] | win.net_star | [] | 2025-10-15 | | | |
| | | Neutrino | ['Kasidet'] | win.neutrino | [] | 2021-09-22 | | | |
| | | Neutrino POS | [] | win.neutrino_pos | [] | 2017-07-12 | | | |
| | | Nevada | [] | win.nevada | [] | 2024-02-02 | | | |
| | | NewBounce | [] | win.newbounce | [] | 2021-12-15 | | | |
| | | NewCore RAT | [] | win.newcore_rat | ['Hellsing'] | 2020-09-25 | | | |
| | | NewPass | [] | win.newpass | ['APT29', 'Turla'] | 2022-10-17 | | | |
| | | NewPosThings | [] | win.newposthings | [] | 2020-03-19 | | | |
| | | NewsReels | [] | win.newsreels | ['Comment Crew'] | 2018-02-10 | | | |
| | | NewCT | ['CT'] | win.new_ct | ['DragonOK'] | 2022-07-29 | | | |
| | | Nexster Bot | [] | win.nexster_bot | [] | 2017-04-29 | | | |
| | | Ngioweb | ['Grobios'] | win.ngioweb | [] | 2024-12-09 | | | |
| | | NightClub | [] | win.nightclub | ['MoustachedBouncer'] | 2023-08-11 | | | |
| | | Nightdoor | ['NetMM', 'Suzafk'] | win.nightdoor | [] | 2024-10-29 | | | |
| | | Nighthawk | [] | win.nighthawk | [] | 2024-08-29 | | | |
| | | NightSky | ['Night Sky'] | win.nightsky | [] | 2022-09-20 | | | |
| | | NikiHTTP | [] | win.nikihttp | ['Kimsuky'] | 2025-10-28 | | | |
| | | NikiTeaR | [] | win.nikitear | ['Kimsuky'] | 2025-11-19 | | | |
| | | Nimbo-C2 | [] | win.nimbo_c2 | [] | 2024-09-13 | | | |
| | | NimGrabber | [] | win.nimgrabber | [] | 2021-12-15 | | | |
| | | Nimplant | [] | win.nimplant | [] | 2023-10-12 | | | |
| | | Nimrev | [] | win.nimrev | [] | 2021-12-15 | | | |
| | | NimBlackout | [] | win.nim_blackout | [] | 2023-07-10 | | | |
| | | NineRAT | [] | win.ninerat | ['Silent Chollima'] | 2023-12-15 | | | |
| | | nitlove | [] | win.nitlove | [] | 2018-08-23 | | | |
| | | Nitol | [] | win.nitol | [] | 2023-03-20 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-05-21 | | | |
| | | Nitrogen Ransomware | [] | win.nitrogen_ransomware | [] | 2025-08-18 | | | |
| | | Nocturnal Stealer | [] | win.nocturnalstealer | [] | 2018-06-13 | | | |
| | | Nokki | [] | win.nokki | ['APT37'] | 2025-06-20 | | | |
| | | Nokoyawa Ransomware | [] | win.nokoyawa | [] | 2024-11-25 | | | |