| | | IconicStealer | [] | win.iconic_stealer | ['Lazarus Group'] | 2023-12-14 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | IISpy | ['BadIIS'] | win.iispy | [] | 2026-02-25 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2025-04-25 | | | |
| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2025-04-25 | | | |
| | | Infy | ['Foudre'] | win.infy | [] | 2026-02-25 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16', 'APT16'] | 2025-10-01 | | | |
| | | IronWind | [] | win.ironwind | [] | 2023-11-14 | | | |
| | | IsaacWiper | ['LASAINRAW'] | win.isaacwiper | [] | 2023-05-21 | | | |
| | | ISMAgent | [] | win.ismagent | ['Greenbug', 'APT34'] | 2022-07-29 | | | |
| | | ISMDoor | [] | win.ismdoor | ['Greenbug'] | 2022-07-29 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsSpace | ['NfLog RAT'] | win.isspace | ['DragonOK', 'Samurai Panda'] | 2022-07-29 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | Jaff | [] | win.jaff | [] | 2023-02-21 | | | |
| | | Jaku | ['C3PRO-RACOON', 'EQUINOX', 'KCNA Infostealer', 'Reconcyc'] | win.jaku | ['DarkHotel'] | 2022-06-09 | | | |
| | | Jasus | [] | win.jasus | ['Cleaver'] | 2017-05-21 | | | |
| | | JelusRAT | [] | win.jelus_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | JessieConTea | [] | win.jessiecontea | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | JinxLoader | [] | win.jinxloader | [] | 2024-01-31 | | | |
| | | JLORAT | [] | win.jlorat | [] | 2023-04-26 | | | |
| | | Joanap | [] | win.joanap | ['Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JripBot | [] | win.jripbot | ['WildNeutron'] | 2020-03-13 | | | |
| | | JSSLoader | [] | win.jssloader | ['Anunak'] | 2023-09-13 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-06-24 | | | |
| | | Jupiter | ['EarlyRAT'] | win.jupiter | ['Silent Chollima'] | 2023-09-01 | | | |
| | | KAgent | [] | win.kagent | ['Cleaver'] | 2017-05-21 | | | |
| | | Kamasers | [] | win.kamasers | [] | 2026-03-27 | | | |
| | | Kaolin RAT | ['KaolinTea'] | win.kaolin_rat | ['Lazarus Group'] | 2025-11-21 | | | |
| | | Kapeka | ['ICYWELL', 'KNUCKLETOUCH', 'QUEUESEED', 'WRONGSENS'] | win.kapeka | ['Sandworm'] | 2024-09-13 | | | |
| | | Karagany | ['Karagny'] | win.karagany | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2022-08-28 | | | |
| | | Karma | [] | win.karma | [] | 2022-04-24 | | | |
| | | KarstoRAT | [] | win.karsto_rat | [] | 2026-02-26 | | | |
| | | KasperAgent | [] | win.kasperagent | [] | 2017-07-11 | | | |
| | | Katz Stealer | [] | win.katz_stealer | [] | 2025-12-30 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2026-05-18 | | | |
| | | KazyLoader | [] | win.kazyloader | [] | 2022-03-08 | | | |
| | | KDC Sponge | [] | win.kdcsponge | [] | 2021-12-07 | | | |
| | | Kegotip | [] | win.kegotip | [] | 2022-02-14 | | | |
| | | Kelihos | [] | win.kelihos | [] | 2021-07-02 | | | |
| | | KerrDown | [] | win.kerrdown | ['APT32'] | 2021-02-25 | | | |
| | | Ketrican | [] | win.ketrican | ['Mirage'] | 2021-02-25 | | | |
| | | Ketrum | [] | win.ketrum | ['Mirage'] | 2020-08-12 | | | |
| | | KeyBoy | ['TSSL'] | win.keyboy | ['Pirate Panda'] | 2020-06-18 | | | |
| | | Keyhole | [] | win.keyhole | [] | 2025-12-11 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | ['UPS'] | 2023-05-15 | | | |
| | | KEYMARBLE | [] | win.keymarble | ['Lazarus Group'] | 2024-11-29 | | | |
| | | KGH_SPY | [] | win.kgh_spy | [] | 2021-07-20 | | | |
| | | KHRAT | [] | win.khrat | ['DragonOK'] | 2022-11-15 | | | |
| | | Kikothac | [] | win.kikothac | [] | 2018-09-06 | | | |
| | | KillAV | ['BURNTCIGAR'] | win.killav | [] | 2023-11-17 | | | |
| | | KillDisk | [] | win.killdisk | ['Sandworm', 'TeleBots'] | 2025-02-03 | | | |
| | | KimJongRat | [] | win.kimjongrat | [] | 2025-06-20 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2025-08-15 | | | |
| | | Kingminer | [] | win.kingminer | [] | 2024-09-06 | | | |
| | | KINS | ['Kasper Internet Non-Security', 'Maple'] | win.kins | [] | 2018-11-08 | | | |
| | | KIVARS | [] | win.kivars | [] | 2021-04-06 | | | |
| | | KiwiStealer | [] | win.kiwistealer | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | kkRAT | [] | win.kk_rat | [] | 2025-09-17 | | | |
| | | KleptoParasite Stealer | ['Joglog', 'Parasite'] | win.kleptoparasite_stealer | [] | 2020-02-16 | | | |
| | | KLRD | [] | win.klrd | ['Anunak'] | 2019-03-05 | | | |
| | | Knight | ['Cyclops'] | win.knight | [] | 2024-09-06 | | | |
| | | Knot | [] | win.knot | [] | 2021-01-04 | | | |
| | | Koadic | [] | win.koadic | ['APT28', 'Stone Panda'] | 2024-01-31 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2025-05-20 | | | |
| | | KOMPROGO | ['Splinter RAT'] | win.komprogo | ['APT32'] | 2019-06-17 | | | |
| | | Konni | [] | win.konni | ['APT37'] | 2025-09-09 | | | |
| | | KoobFace | [] | win.koobface | [] | 2022-01-28 | | | |
| | | Cohhoc | [] | win.cohhoc | [] | 2024-02-02 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2022-09-19 | | | |
| | | Colibri Loader | [] | win.colibri | [] | 2023-06-09 | | | |
| | | Collection RAT | [] | win.collection_rat | ['Silent Chollima'] | 2023-08-30 | | | |
| | | CollectorGoomba | ['Collector Stealer'] | win.collectorgoomba | [] | 2022-11-28 | | | |
| | | Colony | ['Bandios', 'GrayBird'] | win.colony | [] | 2018-04-17 | | | |
| | | Combos | [] | win.combos | ['Comment Crew'] | 2018-02-10 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2026-02-27 | | | |
| | | ComLook | [] | win.comlook | ['Turla'] | 2023-07-08 | | | |
| | | CommonMagic | [] | win.common_magic | [] | 2023-12-04 | | | |
| | | COMpfun | ['Reductor RAT'] | win.compfun | [] | 2022-08-28 | | | |
| | | Computrace | ['lojack'] | win.computrace | ['APT28'] | 2020-05-23 | | | |
| | | concealment_troy | [] | win.concealment_troy | [] | 2018-09-19 | | | |
| | | Conficker | ['traffic converter', 'downadup', 'Kido'] | win.conficker | [] | 2022-02-09 | | | |
| | | Confucius | [] | win.confucius | [] | 2024-02-08 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-06-04 | | | |
| | | Contopee | ['WHITEOUT'] | win.contopee | ['Lazarus Group'] | 2023-08-21 | | | |
| | | CookieBag | [] | win.cookiebag | ['Comment Crew'] | 2018-02-10 | | | |
| | | Corebot | [] | win.corebot | [] | 2024-11-25 | | | |
| | | CoreDN | [] | win.coredn | ['Lazarus Group'] | 2023-09-07 | | | |
| | | Coreshell | ['SOURFACE'] | win.coreshell | ['APT28'] | 2022-05-04 | | | |
| | | CoronaVirus Ransomware | ['CoronaVirus Cover-Ransomware'] | win.coronavirus_ransomware | [] | 2020-04-21 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2025-06-20 | | | |