| | | Corebot | [] | win.corebot | [] | 2024-11-25 | | | |
| | | Dacls | ['MATA'] | win.dacls | ['Lazarus Group'] | 2024-11-25 | | | |
| | | MosaicRegressor | [] | win.mosaic_regressor | [] | 2024-11-25 | | | |
| | | LoJax | [] | win.lojax | ['APT28'] | 2024-11-25 | | | |
| | | NetWire RC | ['NetWeird', 'NetWire', 'Recam'] | win.netwire | ['APT33'] | 2024-11-25 | | | |
| | | PoshC2 | [] | win.poshc2 | ['APT33'] | 2024-11-25 | | | |
| | | Agent.BTZ | ['ComRAT', 'Minit', 'Sun rootkit'] | win.agent_btz | ['Turla'] | 2024-11-25 | | | |
| | | BH_A006 | [] | win.bh_a006 | [] | 2024-11-25 | | | |
| | | DEEPPOST | [] | win.deeppost | [] | 2024-11-25 | | | |
| | | Cryptowall | [] | win.cryptowall | [] | 2024-11-25 | | | |
| | | CryptoFortress | [] | win.crypto_fortress | [] | 2024-11-25 | | | |
| | | Cerber | [] | win.cerber | [] | 2024-11-25 | | | |
| | | Spora | [] | win.spora_ransom | [] | 2024-11-25 | | | |
| | | VirLock | [] | win.virlock | [] | 2024-11-25 | | | |
| | | PadCrypt | [] | win.padcrypt | [] | 2024-11-25 | | | |
| | | Locky | [] | win.locky | ['TA505'] | 2024-11-25 | | | |
| | | Snifula | ['Ursnif'] | win.snifula | [] | 2024-11-25 | | | |
| | | Dosia | ['DDOSIA'] | win.dosia | ['NoName057(16)'] | 2024-11-25 | | | |
| | | solarmarker | ['Jupyter', 'Polazert', 'Yellow Cockatoo'] | win.solarmarker | [] | 2024-08-29 | | | |
| | | Gorilla | [] | elf.gorilla | [] | 2024-11-25 | | | |
| | | SPICA | [] | win.spica | [] | 2024-11-25 | | | |
| | | RCS | ['Remote Control System', 'Crisis'] | win.rcs | ['Hacking Team', 'APT-C-34'] | 2024-11-25 | | | |
| | | DarkVision RAT | [] | win.darkvision_rat | [] | 2024-11-25 | | | |
| | | Matanbuchus | [] | win.matanbuchus | [] | 2024-11-25 | | | |
| | | Nokoyawa Ransomware | [] | win.nokoyawa | [] | 2024-11-25 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2024-11-25 | | | |
| | | BOLDMOVE | [] | elf.boldmove | [] | 2024-11-17 | | | |
| | | MOONTAG | [] | win.moontag | [] | 2024-10-25 | | | |
| | | Running RAT | ['running_rat'] | win.runningrat | [] | 2024-11-15 | | | |
| | | Mozi | [] | elf.mozi | [] | 2024-11-12 | | | |
| | | reptile | [] | elf.reptile | [] | 2024-11-12 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | GobRAT | [] | elf.gobrat | [] | 2023-05-30 | | | |
| | | Hide and Seek | ['HNS'] | elf.hideandseek | [] | 2023-08-28 | | | |
| | | Nosedive | [] | elf.nosedive | ['Flax Typhoon'] | 2024-09-23 | | | |
| | | Persirai | [] | elf.persirai | [] | 2017-05-09 | | | |
| | | Satori | [] | elf.satori | [] | 2021-03-22 | | | |
| | | AstraLocker | [] | win.astralocker | [] | 2022-08-05 | | | |
| | | Atharvan | [] | win.atharvan | ['Silent Chollima'] | 2023-12-15 | | | |
| | | ATI-Agent | [] | win.ati_agent | ['APT 29'] | 2022-03-14 | | | |
| | | Atlantida | [] | win.atlantida | [] | 2024-09-23 | | | |
| | | AtlasAgent | [] | win.atlas_agent | [] | 2023-10-16 | | | |
| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2020-04-26 | | | |
| | | Atmosphere | [] | win.atmosphere | ['Silence group'] | 2019-05-10 | | | |
| | | ATMSpitter | [] | win.atmspitter | ['Cobalt'] | 2020-05-23 | | | |
| | | ATOMSILO | [] | win.atomsilo | [] | 2023-05-15 | | | |
| | | Attor | [] | win.attor | [] | 2022-12-12 | | | |
| | | AuKill | ['SophosKill'] | win.aukill | [] | 2023-04-25 | | | |
| | | Auriga | ['Riodrv'] | win.auriga | ['Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | ['OneKeyLocker'] | win.aurora | ['Oktropys'] | 2023-04-22 | | | |
| | | Avaddon | [] | win.avaddon | ['RIDDLE SPIDER'] | 2022-04-13 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2022-11-15 | | | |
| | | Aveo | [] | win.aveo | [] | 2020-05-23 | | | |
| | | AvosLocker | [] | win.avos_locker | [] | 2022-10-14 | | | |
| | | Unidentified 061 | [] | win.avrecon | [] | 2019-07-31 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | Aytoke | [] | win.aytoke | [] | 2021-10-24 | | | |
| | | Azorult | ['PuffStealer', 'Rultazo'] | win.azorult | ['The Gorgon Group'] | 2024-10-30 | | | |
| | | Azov Wiper | [] | win.azov_wiper | [] | 2023-01-25 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2024-09-13 | | | |
| | | Bachosens | [] | win.bachosens | [] | 2023-03-16 | | | |
| | | BACKBEND | [] | win.backbend | ['APT 30'] | 2019-04-17 | | | |
| | | BackConfig | [] | win.backconfig | ['VICEROY TIGER'] | 2022-07-29 | | | |
| | | backspace | ['Lecna', 'ZRLnk'] | win.backspace | ['APT 30'] | 2022-08-25 | | | |
| | | BackSwap | [] | win.backswap | [] | 2022-04-25 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | ['Leviathan'] | 2019-03-25 | | | |
| | | BADHATCH | [] | win.badhatch | ['FIN8'] | 2023-08-31 | | | |
| | | BadNews | [] | win.badnews | ['QUILTED TIGER'] | 2024-09-23 | | | |
| | | Bagle | [] | win.bagle | [] | 2021-12-31 | | | |
| | | BalkanDoor | [] | win.balkan_door | [] | 2019-09-03 | | | |
| | | Bamital | [] | win.bamital | [] | 2019-10-21 | | | |
| | | Banatrix | [] | win.banatrix | [] | 2017-05-22 | | | |
| | | Bandit Stealer | [] | win.bandit | [] | 2024-05-14 | | | |
| | | Bandook | ['Bandok'] | win.bandook | ['Dark Caracal'] | 2024-01-05 | | | |
| | | bangat | [] | win.bangat | ['Comment Crew'] | 2018-09-11 | | | |
| | | Banjori | ['MultiBanker 2', 'BankPatch', 'BackPatcher'] | win.banjori | [] | 2018-07-31 | | | |
| | | BanPolMex RAT | [] | win.banpolmex | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Bart | [] | win.bart | [] | 2022-02-14 | | | |
| | | BatchWiper | [] | win.batchwiper | [] | 2021-10-05 | | | |
| | | Batel | [] | win.batel | [] | 2020-04-21 | | | |
| | | BazarBackdoor | ['BEERBOT', 'KEGTAP', 'Team9Backdoor', 'bazaloader', 'bazarloader'] | win.bazarbackdoor | ['UNC1878'] | 2023-10-16 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2023-06-23 | | | |
| | | BEATDROP | [] | win.beatdrop | ['APT29'] | 2024-02-02 | | | |
| | | Bedep | [] | win.bedep | [] | 2024-06-28 | | | |
| | | Bee | [] | win.bee | [] | 2021-01-29 | | | |
| | | BeepService | [] | win.beepservice | [] | 2020-05-27 | | | |
| | | BernhardPOS | [] | win.bernhardpos | [] | 2022-09-19 | | | |
| | | BetaBot | ['Neurevt'] | win.betabot | [] | 2022-08-28 | | | |
| | | BHunt | [] | win.bhunt | [] | 2022-02-26 | | | |
| | | BI_D Ransomware | [] | win.bid_ransomware | [] | 2019-08-12 | | | |
| | | BillGates | [] | win.billgates | [] | 2023-08-31 | | | |
| | | Biscuit | ['zxdosml'] | win.biscuit | ['Comment Crew'] | 2018-02-10 | | | |
| | | BISTROMATH | [] | win.bistromath | ['Lazarus Group', 'Silent Chollima'] | 2023-09-22 | | | |
| | | BITSloth | [] | win.bitsloth | [] | 2024-08-29 | | | |
| | | Bitsran | ['SHADYCAT'] | win.bitsran | ['Lazarus Group'] | 2019-08-26 | | | |