| | | Bitter RAT | [] | win.bitter_rat | [] | 2024-03-04 | | | |
| | | BKA Trojaner | ['bwin3_bka'] | win.bka_trojaner | [] | 2018-05-28 | | | |
| | | BlackByte | [] | win.blackbyte | [] | 2024-08-29 | | | |
| | | BlackEnergy | [] | win.blackenergy | ['Sandworm'] | 2024-04-23 | | | |
| | | BlackLotus | [] | win.blacklotus | [] | 2023-12-27 | | | |
| | | BlackMagic | [] | win.blackmagic | [] | 2022-12-08 | | | |
| | | BlackPOS | ['Kaptoxa', 'MMon', 'POSWDS', 'Reedum'] | win.blackpos | [] | 2020-10-05 | | | |
| | | BlackShades | [] | win.blackshades | [] | 2020-05-23 | | | |
| | | BlackSoul | [] | win.blacksoul | [] | 2021-01-10 | | | |
| | | BleachGap | [] | win.bleachgap | [] | 2022-08-28 | | | |
| | | Blister | ['COLORFAKE'] | win.blister | [] | 2023-11-14 | | | |
| | | BLUEHAZE | [] | win.bluehaze | [] | 2022-12-02 | | | |
| | | BLUELIGHT | [] | win.bluelight | ['APT37'] | 2023-05-24 | | | |
| | | BlueNoroff | [] | win.bluenoroff | ['Lazarus Group'] | 2023-08-14 | | | |
| | | BOATLAUNCH | [] | win.boatlaunch | ['FIN7'] | 2022-04-07 | | | |
| | | Boaxxe | [] | win.boaxxe | [] | 2018-03-26 | | | |
| | | Bohmini | [] | win.bohmini | [] | 2018-07-24 | | | |
| | | BOLDMOVE | [] | win.boldmove | [] | 2023-01-20 | | | |
| | | Bolek | ['KBOT'] | win.bolek | [] | 2020-04-06 | | | |
| | | BookCodes RAT | ['BookCodesTea'] | win.bookcodesrat | ['Lazarus Group'] | 2023-07-24 | | | |
| | | BOOTWRECK | ['MBRkiller'] | win.bootwreck | ['Lazarus Group'] | 2019-10-12 | | | |
| | | BottomLoader | [] | win.bottomloader | [] | 2023-12-15 | | | |
| | | Bouncer | [] | win.bouncer | ['Comment Crew'] | 2018-02-10 | | | |
| | | BoxCaon | [] | win.boxcaon | [] | 2022-10-25 | | | |
| | | 3CX Backdoor | ['SUDDENICON'] | win.3cx_backdoor | ['Lazarus Group'] | 2023-12-19 | | | |
| | | 5.t Downloader | [] | win.5t_downloader | [] | 2024-06-05 | | | |
| | | 7ev3n | [] | win.7ev3n | [] | 2018-01-23 | | | |
| | | 8.t Dropper | ['8t_dropper', 'RoyalRoad'] | win.8t_dropper | ['Hellsing', 'Ice Fog', 'Pirate Panda', 'RANCOR', 'TA428', 'Tick', 'Tonto Team', 'Karma Panda'] | 2023-11-27 | | | |
| | | 9002 RAT | ['McRAT', 'Hydraq', 'HOMEUNIX'] | win.9002 | ['Aurora Panda', 'APT31', 'Group 27'] | 2024-07-22 | | | |
| | | AbaddonPOS | ['PinkKite', 'TinyPOS'] | win.abaddon_pos | [] | 2022-11-15 | | | |
| | | ABCsync | [] | win.abcsync | [] | 2024-10-21 | | | |
| | | AbSent Loader | [] | win.absentloader | [] | 2020-05-18 | | | |
| | | ACBackdoor | [] | win.acbackdoor | [] | 2019-11-22 | | | |
| | | ACEHASH | [] | win.acehash | ['APT41'] | 2021-03-02 | | | |
| | | AcidBox | ['MagicScroll'] | win.acidbox | [] | 2020-08-14 | | | |
| | | AcridRain | [] | win.acridrain | [] | 2018-09-03 | | | |
| | | Acronym | [] | win.acronym | [] | 2017-04-06 | | | |
| | | Action RAT | [] | win.action_rat | ['SideCopy'] | 2024-10-21 | | | |
| | | Adhubllka | [] | win.adhubllka | [] | 2020-07-23 | | | |
| | | AdKoob | [] | win.adkoob | [] | 2018-08-27 | | | |
| | | AdvisorsBot | [] | win.advisorsbot | [] | 2020-04-16 | | | |
| | | Afrodita | [] | win.afrodita | [] | 2020-03-27 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2022-12-20 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2020-11-09 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | Albaniiutas | ['BlueTraveller'] | win.albaniiutas | ['TA428'] | 2024-10-15 | | | |
| | | Project Alice | ['PrAlice', 'AliceATM'] | win.alice_atm | [] | 2020-02-27 | | | |
| | | Alina POS | ['alina_spark', 'katrina', 'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | ['OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | AlphaNC | [] | win.alphanc | ['Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Alureon | ['Olmarik', 'Pihar', 'TDL', 'TDSS', 'wowlik'] | win.alureon | [] | 2024-04-23 | | | |
| | | AMTsol | ['Adupihan'] | win.amtsol | ['PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2023-07-24 | | | |
| | | AnchorMTea | [] | win.anchormtea | ['Lazarus Group'] | 2023-07-24 | | | |
| | | Andardoor | ['ROCKHATCH'] | win.andardoor | ['Silent Chollima'] | 2023-10-11 | | | |
| | | Andromeda | ['Gamarue', 'B106-Gamarue', 'B67-SS-Gamarue', 'b66'] | win.andromeda | ['Operation C-Major'] | 2023-04-26 | | | |
| | | AndroMut | ['Gelup'] | win.andromut | ['TA505'] | 2023-08-03 | | | |
| | | APERETIF | [] | win.aperetif | [] | 2023-03-20 | | | |
| | | Apocalipto | [] | win.apocalipto | [] | 2018-04-23 | | | |
| | | Apocalypse | [] | win.apocalypse_ransom | [] | 2016-12-26 | | | |
| | | Arefty | [] | win.arefty | [] | 2016-04-25 | | | |
| | | AresLoader | [] | win.aresloader | [] | 2023-04-22 | | | |
| | | Aria-body | [] | win.ariabody | ['Naikon'] | 2024-06-04 | | | |
| | | Arik Keylogger | ['Aaron Keylogger'] | win.arik_keylogger | [] | 2018-02-07 | | | |
| | | Arkei Stealer | ['ArkeiStealer'] | win.arkei_stealer | [] | 2024-01-30 | | | |
| | | ARTFULPIE | [] | win.artfulpie | ['Lazarus Group'] | 2020-02-27 | | | |
| | | AscentLoader | [] | win.ascentloader | [] | 2018-07-05 | | | |
| | | Asprox | ['Aseljo', 'BadSrc'] | win.asprox | [] | 2018-11-28 | | | |
| | | Asruex | [] | win.asruex | ['DarkHotel'] | 2020-06-16 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2022-09-19 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2023-06-09 | | | |
| | | Collection RAT | [] | win.collection_rat | ['Silent Chollima'] | 2023-08-30 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2023-07-08 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-12-04 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2023-08-21 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | Cotx RAT | [] | win.cotx | ['TA428'] | 2022-08-11 | | | |
| | | Cova | [] | win.cova | [] | 2022-12-07 | | | |
| | | Covid22 | [] | win.covid22 | [] | 2021-11-17 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CRAT | [] | win.crat | ['Lazarus Group'] | 2021-04-06 | | | |
| | | Credraptor | [] | win.credraptor | ['TeleBots'] | 2021-03-04 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |