| | | WannaCryptor | ['Wana Decrypt0r', 'WannaCry', 'WannaCrypt', 'Wcry'] | win.wannacryptor | ['Lazarus Group'] | 2025-02-25 | | | |
| | | Dtrack | ['Preft', 'TroyRAT'] | win.dtrack | ['Lazarus Group', 'Silent Chollima'] | 2024-11-29 | | | |
| | | Oblique RAT | [] | win.oblique_rat | [] | 2024-11-29 | | | |
| | | Peppy RAT | [] | win.peppy_rat | ['Operation C-Major'] | 2024-11-29 | | | |
| | | DarkComet | ['Breut', 'Fynloski', 'klovbot'] | win.darkcomet | ['APT33', 'Lazarus Group', 'Operation C-Major'] | 2024-11-29 | | | |
| | | Roseam | ['PisLoader'] | win.roseam | ['Wekby'] | 2024-11-29 | | | |
| | | Machete | ['El Machete'] | win.machete | [] | 2024-11-29 | | | |
| | | Ragnarok | [] | win.ragnarok | [] | 2024-11-29 | | | |
| | | NOTROBIN | ['remove_bds'] | elf.notrobin | [] | 2024-11-29 | | | |
| | | Aurora Stealer | [] | win.aurora_stealer | [] | 2024-11-26 | | | |
| | | BlueFox | [] | win.bluefox | [] | 2024-11-26 | | | |
| | | Crystal Rans0m | ['CrystalRansom'] | win.crystal_ransom | [] | 2024-11-26 | | | |
| | | Icesword | [] | jsp.icesword | ['Gelsemium'] | 2024-11-26 | | | |
| | | FireWood | [] | elf.firewood | ['Gelsemium'] | 2024-11-26 | | | |
| | | WolfsBane | [] | elf.wolfsbane | ['Gelsemium'] | 2024-11-26 | | | |
| | | Mars Stealer | [] | win.mars_stealer | [] | 2024-11-26 | | | |
| | | Eternity Stealer | [] | win.eternity_stealer | [] | 2024-11-26 | | | |
| | | CryptXXXX | [] | win.cryptxxxx | [] | 2024-11-26 | | | |
| | | Dharma | ['Arena', 'Crysis', 'Wadhrama', 'ncov'] | win.dharma | [] | 2024-11-26 | | | |
| | | Gravity RAT | [] | apk.gravity_rat | [] | 2024-11-26 | | | |
| | | Gravity RAT | [] | win.gravity_rat | [] | 2024-11-26 | | | |
| | | XiaoBa | [] | win.xiaoba | [] | 2020-03-19 | | | |
| | | BANSHEE | [] | osx.banshee | [] | 2024-11-26 | | | |
| | | LIGHTSPY | [] | osx.lightspy | [] | 2024-11-25 | | | |
| | | Melofee | ['Mélofée'] | elf.melofee | [] | 2024-11-25 | | | |
| | | Corebot | [] | win.corebot | [] | 2024-11-25 | | | |
| | | Dacls | ['MATA'] | win.dacls | ['Lazarus Group'] | 2024-11-25 | | | |
| | | LoJax | [] | win.lojax | ['APT28'] | 2024-11-25 | | | |
| | | MosaicRegressor | [] | win.mosaic_regressor | [] | 2024-11-25 | | | |
| | | NetWire RC | ['NetWeird', 'NetWire', 'Recam'] | win.netwire | ['APT33'] | 2024-11-25 | | | |
| | | PoshC2 | [] | win.poshc2 | ['APT33'] | 2024-11-25 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2024-11-25 | | | |
| | | BH_A006 | [] | win.bh_a006 | [] | 2024-11-25 | | | |
| | | DEEPPOST | [] | win.deeppost | [] | 2024-11-25 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2024-11-25 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2024-11-25 | | | |
| | | Cerber | [] | win.cerber | [] | 2024-11-25 | | | |
| | | PadCrypt | [] | win.padcrypt | [] | 2024-11-25 | | | |
| | | Spora | [] | win.spora_ransom | [] | 2024-11-25 | | | |
| | | Locky | [] | win.locky | ['TA505'] | 2024-11-25 | | | |
| | | VirLock | [] | win.virlock | [] | 2024-11-25 | | | |
| | | Snifula | ['Ursnif'] | win.snifula | [] | 2024-11-25 | | | |
| | | solarmarker | ['Jupyter', 'Polazert', 'Yellow Cockatoo'] | win.solarmarker | [] | 2024-08-29 | | | |
| | | Gorilla | [] | elf.gorilla | [] | 2024-11-25 | | | |
| | | SPICA | [] | win.spica | [] | 2024-11-25 | | | |
| | | RCS | ['Remote Control System', 'Crisis'] | win.rcs | ['Hacking Team', 'APT-C-34'] | 2024-11-25 | | | |
| | | DarkVision RAT | [] | win.darkvision_rat | [] | 2024-11-25 | | | |
| | | Nokoyawa Ransomware | [] | win.nokoyawa | [] | 2024-11-25 | | | |
| | | Matanbuchus | [] | win.matanbuchus | [] | 2024-11-25 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2024-11-25 | | | |
| | | BOLDMOVE | [] | elf.boldmove | [] | 2024-11-17 | | | |
| | | MOONTAG | [] | win.moontag | [] | 2024-10-25 | | | |
| | | Running RAT | ['running_rat'] | win.runningrat | [] | 2024-11-15 | | | |
| | | Mozi | [] | elf.mozi | [] | 2024-11-12 | | | |
| | | reptile | [] | elf.reptile | [] | 2024-11-12 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | GobRAT | [] | elf.gobrat | [] | 2023-05-30 | | | |
| | | Hide and Seek | ['HNS'] | elf.hideandseek | [] | 2023-08-28 | | | |
| | | Nosedive | [] | elf.nosedive | ['Flax Typhoon'] | 2024-09-23 | | | |
| | | Persirai | [] | elf.persirai | [] | 2017-05-09 | | | |
| | | Satori | [] | elf.satori | [] | 2021-03-22 | | | |
| | | BOOTWRECK | ['MBRkiller'] | win.bootwreck | ['Lazarus Group'] | 2019-10-12 | | | |
| | | BottomLoader | [] | win.bottomloader | [] | 2023-12-15 | | | |
| | | Bouncer | [] | win.bouncer | ['Comment Crew'] | 2018-02-10 | | | |
| | | BoxCaon | [] | win.boxcaon | [] | 2022-10-25 | | | |
| | | Brambul | ['SORRYBRUTE'] | win.brambul | ['Lazarus Group'] | 2022-03-02 | | | |
| | | BravoNC | [] | win.bravonc | ['Lazarus Group'] | 2017-05-23 | | | |
| | | BrbBot | [] | win.brbbot | [] | 2022-02-09 | | | |
| | | BreachRAT | [] | win.breach_rat | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2022-01-28 | | | |
| | | BROLER | ['down_new'] | win.broler | ['Tick'] | 2020-06-02 | | | |
| | | Bruh Wiper | [] | win.bruh_wiper | [] | 2023-01-25 | | | |
| | | BrutPOS | [] | win.brutpos | [] | 2018-04-23 | | | |
| | | BS2005 | [] | win.bs2005 | ['Mirage'] | 2021-04-29 | | | |
| | | BTCWare | [] | win.btcware | [] | 2024-05-14 | | | |
| | | BUBBLEWRAP | [] | win.bubblewrap | ['Temper Panda'] | 2019-04-12 | | | |
| | | Buer | ['Buerloader', 'RustyBuer'] | win.buer | [] | 2023-01-31 | | | |
| | | BUGHATCH | [] | win.bughatch | [] | 2023-05-15 | | | |
| | | Buhtrap | ['Ratopak'] | win.buhtrap | ['BuhTrap'] | 2021-02-06 | | | |
| | | Bundestrojaner | ['R2D2', '0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2021-04-12 | | | |
| | | BunnyLoader | [] | win.bunnyloader | [] | 2024-03-25 | | | |
| | | Buterat | ['spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | Buzus | ['Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | BYEBY | [] | win.byeby | ['Calypso group', 'Karma Panda'] | 2022-07-25 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28', 'Sandworm'] | 2024-06-13 | | | |
| | | CadelSpy | ['Cadelle'] | win.cadelspy | [] | 2023-10-17 | | | |
| | | CALMTHORN | [] | win.calmthorn | ['Tonto Team'] | 2021-02-09 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2024-05-14 | | | |
| | | campoloader | [] | win.campoloader | [] | 2021-08-06 | | | |
| | | Carberp | [] | win.carberp | [] | 2023-07-24 | | | |
| | | CargoBay | [] | win.cargobay | [] | 2023-02-27 | | | |
| | | CARROTBALL | [] | win.carrotball | [] | 2020-02-04 | | | |
| | | CarrotBat | [] | win.carrotbat | [] | 2020-01-26 | | | |
| | | Casper | [] | win.casper | ['SNOWGLOBE'] | 2018-01-17 | | | |
| | | CatB | [] | win.catb | [] | 2024-09-04 | | | |
| | | Catchamas | [] | win.catchamas | ['Thrip'] | 2018-06-25 | | | |