| | | BadNews | [] | win.badnews | ['QUILTED TIGER'] | 2024-09-23 | | | |
| | | Bagle | [] | win.bagle | [] | 2021-12-31 | | | |
| | | BalkanDoor | [] | win.balkan_door | [] | 2019-09-03 | | | |
| | | Bamital | [] | win.bamital | [] | 2019-10-21 | | | |
| | | Banatrix | [] | win.banatrix | [] | 2017-05-22 | | | |
| | | Bandit Stealer | [] | win.bandit | [] | 2024-05-14 | | | |
| | | Bandook | ['Bandok'] | win.bandook | ['Dark Caracal'] | 2024-01-05 | | | |
| | | bangat | [] | win.bangat | ['Comment Crew'] | 2018-09-11 | | | |
| | | Banjori | ['MultiBanker 2', 'BankPatch', 'BackPatcher'] | win.banjori | [] | 2018-07-31 | | | |
| | | BanPolMex RAT | [] | win.banpolmex | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Bart | [] | win.bart | [] | 2022-02-14 | | | |
| | | BatchWiper | [] | win.batchwiper | [] | 2021-10-05 | | | |
| | | Batel | [] | win.batel | [] | 2020-04-21 | | | |
| | | BazarBackdoor | ['BEERBOT', 'KEGTAP', 'Team9Backdoor', 'bazaloader', 'bazarloader'] | win.bazarbackdoor | ['UNC1878'] | 2023-10-16 | | | |
| | | BBSRAT | [] | win.bbsrat | [] | 2023-06-23 | | | |
| | | BEATDROP | [] | win.beatdrop | ['APT29'] | 2024-02-02 | | | |
| | | Bedep | [] | win.bedep | [] | 2024-06-28 | | | |
| | | Bee | [] | win.bee | [] | 2021-01-29 | | | |
| | | BeepService | [] | win.beepservice | [] | 2020-05-27 | | | |
| | | BernhardPOS | [] | win.bernhardpos | [] | 2022-09-19 | | | |
| | | BetaBot | ['Neurevt'] | win.betabot | [] | 2022-08-28 | | | |
| | | BHunt | [] | win.bhunt | [] | 2022-02-26 | | | |
| | | BI_D Ransomware | [] | win.bid_ransomware | [] | 2019-08-12 | | | |
| | | BillGates | [] | win.billgates | [] | 2023-08-31 | | | |
| | | Biscuit | ['zxdosml'] | win.biscuit | ['Comment Crew'] | 2018-02-10 | | | |
| | | BISTROMATH | [] | win.bistromath | ['Lazarus Group', 'Silent Chollima'] | 2023-09-22 | | | |
| | | BITSloth | [] | win.bitsloth | [] | 2024-08-29 | | | |
| | | Bitsran | ['SHADYCAT'] | win.bitsran | ['Lazarus Group'] | 2019-08-26 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2024-03-04 | | | |
| | | BKA Trojaner | ['bwin3_bka'] | win.bka_trojaner | [] | 2018-05-28 | | | |
| | | BlackByte | [] | win.blackbyte | [] | 2024-08-29 | | | |
| | | BlackEnergy | [] | win.blackenergy | ['Sandworm'] | 2024-04-23 | | | |
| | | BlackLotus | [] | win.blacklotus | [] | 2023-12-27 | | | |
| | | BlackMagic | [] | win.blackmagic | [] | 2022-12-08 | | | |
| | | BlackPOS | ['Kaptoxa', 'MMon', 'POSWDS', 'Reedum'] | win.blackpos | [] | 2020-10-05 | | | |
| | | BlackShades | [] | win.blackshades | [] | 2020-05-23 | | | |
| | | BlackSoul | [] | win.blacksoul | [] | 2021-01-10 | | | |
| | | BleachGap | [] | win.bleachgap | [] | 2022-08-28 | | | |
| | | Blister | ['COLORFAKE'] | win.blister | [] | 2023-11-14 | | | |
| | | BLUEHAZE | [] | win.bluehaze | [] | 2022-12-02 | | | |
| | | BLUELIGHT | [] | win.bluelight | ['APT37'] | 2023-05-24 | | | |
| | | BlueNoroff | [] | win.bluenoroff | ['Lazarus Group'] | 2023-08-14 | | | |
| | | BOATLAUNCH | [] | win.boatlaunch | ['FIN7'] | 2022-04-07 | | | |
| | | Boaxxe | [] | win.boaxxe | [] | 2018-03-26 | | | |
| | | Bohmini | [] | win.bohmini | [] | 2018-07-24 | | | |
| | | BOLDMOVE | [] | win.boldmove | [] | 2023-01-20 | | | |
| | | Bolek | ['KBOT'] | win.bolek | [] | 2020-04-06 | | | |
| | | BookCodes RAT | ['BookCodesTea'] | win.bookcodesrat | ['Lazarus Group'] | 2023-07-24 | | | |
| | | BOOTWRECK | ['MBRkiller'] | win.bootwreck | ['Lazarus Group'] | 2019-10-12 | | | |
| | | BottomLoader | [] | win.bottomloader | [] | 2023-12-15 | | | |
| | | Bouncer | [] | win.bouncer | ['Comment Crew'] | 2018-02-10 | | | |
| | | BoxCaon | [] | win.boxcaon | [] | 2022-10-25 | | | |
| | | Brambul | ['SORRYBRUTE'] | win.brambul | ['Lazarus Group'] | 2022-03-02 | | | |
| | | BravoNC | [] | win.bravonc | ['Lazarus Group'] | 2017-05-23 | | | |
| | | BrbBot | [] | win.brbbot | [] | 2022-02-09 | | | |
| | | BreachRAT | [] | win.breach_rat | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2022-01-28 | | | |
| | | BROLER | ['down_new'] | win.broler | ['Tick'] | 2020-06-02 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2022-09-19 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2023-06-09 | | | |
| | | Collection RAT | [] | win.collection_rat | ['Silent Chollima'] | 2023-08-30 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2023-07-08 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-12-04 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2023-08-21 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2022-09-20 | | | |
| | | Cotx RAT | [] | win.cotx | ['TA428'] | 2022-08-11 | | | |
| | | Cova | [] | win.cova | [] | 2022-12-07 | | | |
| | | Covid22 | [] | win.covid22 | [] | 2021-11-17 | | | |
| | | CradleCore | [] | win.cradlecore | [] | 2017-05-12 | | | |
| | | CRAT | [] | win.crat | ['Lazarus Group'] | 2021-04-06 | | | |
| | | Credraptor | [] | win.credraptor | ['TeleBots'] | 2021-03-04 | | | |
| | | Crenufs | [] | win.crenufs | [] | 2018-07-24 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2024-09-02 | | | |
| | | Croxloader | [] | win.croxloader | [] | 2023-05-04 | | | |
| | | CruLoader | [] | win.cruloader | [] | 2024-02-06 | | | |
| | | Crutch | [] | win.crutch | ['Turla'] | 2021-05-03 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CrypticConvo | [] | win.cryptic_convo | ['Scarlet Mimic'] | 2020-01-26 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2021-09-19 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |
| | | CryptoMix | ['Azer', 'CryptFile2'] | win.cryptomix | [] | 2023-02-06 | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Crytox | [] | win.crytox | [] | 2023-06-05 | | | |
| | | Cuegoe | [] | win.cuegoe | ['APT32'] | 2017-05-19 | | | |