| | | DataExfiltrator | ['FileSender'] | win.data_exfiltrator | [] | 2021-07-21 | | | |
| | | Datper | [] | win.datper | ['Tick'] | 2021-03-02 | | | |
| | | Daxin | ['DELIMEAT'] | win.daxin | [] | 2023-07-19 | | | |
| | | DDKeylogger | [] | win.ddkeylogger | [] | 2020-05-27 | | | |
| | | DDKONG | [] | win.ddkong | ['RANCOR'] | 2022-07-29 | | | |
| | | DEADWOOD | ['Agrius', 'SQLShred', 'DETBOSIT'] | win.deadwood | [] | 2023-01-19 | | | |
| | | DeathRansom | ['deathransom', 'wacatac'] | win.deathransom | [] | 2024-05-17 | | | |
| | | DECAF | [] | win.decaf | [] | 2021-11-03 | | | |
| | | Defray | ['Glushkov'] | win.defray | [] | 2021-02-09 | | | |
| | | Delta(Alfa,Bravo, ...) | [] | win.deltas | ['Lazarus Group'] | 2017-07-12 | | | |
| | | DeltaStealer | [] | win.deltastealer | [] | 2023-06-01 | | | |
| | | Dented | [] | win.dented | [] | 2017-11-16 | | | |
| | | DeputyDog | [] | win.deputydog | ['Aurora Panda'] | 2020-06-08 | | | |
| | | DeroHE | [] | win.derohe | [] | 2021-01-21 | | | |
| | | Derusbi | ['PHOTO'] | win.derusbi | ['APT41', 'APT17', 'Leviathan', 'Stone Panda'] | 2024-04-11 | | | |
| | | DevOpt | [] | win.devopt | [] | 2023-04-25 | | | |
| | | Dexbia | ['CONIME'] | win.dexbia | ['Tonto Team'] | 2020-10-06 | | | |
| | | Dexter | ['LusyPOS'] | win.dexter | [] | 2022-11-12 | | | |
| | | Diavol | [] | win.diavol | [] | 2022-10-05 | | | |
| | | DICELOADER | ['Lizar'] | win.diceloader | [] | 2024-07-03 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2024-04-11 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | Disk Knight | [] | win.disk_knight | [] | 2023-11-13 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | ['Shamoon'] | win.disttrack | ['Shamoon', 'Magic Hound', 'Timberworm', 'COBALT GIPSY'] | 2023-01-19 | | | |
| | | Divergent | ['Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | Dizzyvoid | ['Errorroot'] | win.dizzyvoid | ['Earth Lusca'] | 2024-03-25 | | | |
| | | DLRAT | [] | win.dlrat | [] | 2023-12-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2023-08-31 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | DNSpionage | ['Agent Drable', 'AgentDrable', 'Webmask'] | win.dnspionage | ['DNSpionage'] | 2024-10-14 | | | |
| | | Chinotto | [] | win.chinotto | ['APT37'] | 2023-11-22 | | | |
| | | Chinad | [] | win.chinad | [] | 2023-06-01 | | | |
| | | ChewBacca | [] | win.chewbacca | [] | 2018-04-26 | | | |
| | | Chinoxy | [] | win.chinoxy | [] | 2022-08-28 | | | |
| | | Chir | [] | win.chir | [] | 2017-01-17 | | | |
| | | ChiserClient | [] | win.chiser_client | ['Pirate Panda'] | 2022-03-30 | | | |
| | | CherryPicker POS | ['cherrypickerpos', 'cherrypicker', 'cherry_picker'] | win.cherry_picker | [] | 2022-12-01 | | | |
| | | CHEESETRAY | ['CROWDEDFLOUNDER'] | win.cheesetray | ['Lazarus Group'] | 2020-02-27 | | | |
| | | ChrGetPdsi Stealer | [] | win.chrgetpdsi_stealer | [] | 2024-06-24 | | | |
| | | Chthonic | ['AndroKINS'] | win.chthonic | [] | 2021-09-19 | | | |
| | | Bundestrojaner | ['R2D2', '0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | ChChes | ['HAYMAKER', 'Ham Backdoor'] | win.chches | ['Stone Panda'] | 2020-05-23 | | | |
| | | Cinobi | [] | win.cinobi | [] | 2021-08-09 | | | |
| | | Citadel | [] | win.citadel | [] | 2021-06-29 | | | |
| | | Clambling | [] | win.clambling | [] | 2021-01-11 | | | |
| | | CLASSFON | [] | win.classfon | [] | 2019-08-09 | | | |
| | | Client Maximus | [] | win.client_maximus | [] | 2017-06-03 | | | |
| | | Clipog | [] | win.clipog | [] | 2023-10-20 | | | |
| | | Clop | [] | win.clop | ['TA505'] | 2024-05-10 | | | |
| | | CLOUDBURST | ['NickelLoader'] | win.cloudburst | ['Lazarus Group'] | 2023-12-27 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2024-11-06 | | | |
| | | CloudWizard | [] | win.cloudwizard | [] | 2023-06-01 | | | |
| | | CloudDuke | ['MiniDionis', 'CloudLook'] | win.cloud_duke | ['APT29'] | 2022-11-15 | | | |
| | | CMSBrute | [] | win.cmsbrute | [] | 2017-09-07 | | | |
| | | CMSTAR | ['meciv'] | win.cmstar | [] | 2022-07-25 | | | |
| | | CobInt | ['COOLPANTS'] | win.cobint | ['Cobalt'] | 2020-07-24 | | | |
| | | Cobra Carbon System | ['Carbon'] | win.cobra | ['Turla'] | 2023-05-10 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | Buzus | ['Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | Carberp | [] | win.carberp | [] | 2023-07-24 | | | |
| | | CargoBay | [] | win.cargobay | [] | 2023-02-27 | | | |
| | | CARROTBALL | [] | win.carrotball | [] | 2020-02-04 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2020-01-26 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | Casper | [] | win.casper | ['SNOWGLOBE'] | 2018-01-17 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28', 'Sandworm'] | 2024-06-13 | | | |
| | | CatB | [] | win.catb | [] | 2024-09-04 | | | |
| | | Catchamas | [] | win.catchamas | ['Thrip'] | 2018-06-25 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | BYEBY | [] | win.byeby | ['Calypso group', 'Karma Panda'] | 2022-07-25 | | | |
| | | Buterat | ['spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | BunnyLoader | [] | win.bunnyloader | [] | 2024-03-25 | | | |
| | | CadelSpy | ['Cadelle'] | win.cadelspy | [] | 2023-10-17 | | | |
| | | Chainshot | [] | win.chainshot | [] | 2021-07-20 | | | |
| | | CALMTHORN | [] | win.calmthorn | ['Tonto Team'] | 2021-02-09 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2021-04-12 | | | |
| | | CHAIRSMACK | [] | win.chairsmack | ['Charming Kitten'] | 2023-11-17 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2024-05-14 | | | |
| | | Chaperone | ['Taj Mahal'] | win.chaperone | [] | 2020-08-13 | | | |
| | | campoloader | [] | win.campoloader | [] | 2021-08-06 | | | |
| | | Bashlite | ['gayfgt', 'Gafgyt', 'qbot', 'torlus', 'lizkebab'] | elf.bashlite | [] | 2024-09-11 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | [] | 2024-07-03 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['Anunak'] | 2024-11-06 | | | |
| | | AvosLocker | [] | win.avos_locker | [] | 2022-10-14 | | | |
| | | Unidentified 061 | [] | win.avrecon | [] | 2019-07-31 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | Aytoke | [] | win.aytoke | [] | 2021-10-24 | | | |
| | | Azorult | ['PuffStealer', 'Rultazo'] | win.azorult | ['The Gorgon Group'] | 2024-10-30 | | | |
| | | Azov Wiper | [] | win.azov_wiper | [] | 2023-01-25 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2024-09-13 | | | |
| | | BabyShark | ['LATEOP'] | win.babyshark | ['Kimsuky'] | 2024-08-23 | | | |
| | | Bachosens | [] | win.bachosens | [] | 2023-03-16 | | | |