| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2024-09-02 | | | |
| | | Croxloader | [] | win.croxloader | [] | 2023-05-04 | | | |
| | | CruLoader | [] | win.cruloader | [] | 2024-02-06 | | | |
| | | Crutch | [] | win.crutch | ['Turla'] | 2021-05-03 | | | |
| | | CryLocker | [] | win.crylocker | [] | 2016-12-27 | | | |
| | | CrypMic | [] | win.crypmic | [] | 2017-12-13 | | | |
| | | Crypt0l0cker | [] | win.crypt0l0cker | [] | 2017-08-04 | | | |
| | | CrypticConvo | [] | win.cryptic_convo | ['Scarlet Mimic'] | 2020-01-26 | | | |
| | | CryptoLocker | [] | win.cryptolocker | [] | 2021-09-19 | | | |
| | | CryptoLuck | [] | win.cryptoluck | [] | 2016-12-27 | | | |
| | | CryptoMix | ['Azer', 'CryptFile2'] | win.cryptomix | [] | 2023-02-06 | | | |
| | | CryptoShield | [] | win.cryptoshield | [] | 2017-03-23 | | | |
| | | CryptoShuffler | [] | win.cryptoshuffler | [] | 2017-11-17 | | | |
| | | Crytox | [] | win.crytox | [] | 2023-06-05 | | | |
| | | Cuegoe | [] | win.cuegoe | ['APT32'] | 2017-05-19 | | | |
| | | Cueisfry | [] | win.cueisfry | [] | 2018-03-23 | | | |
| | | Cur1Downloader | [] | win.cur1_downloader | ['Lazarus Group'] | 2023-07-12 | | | |
| | | Curator | ['Ever101', 'SunnyDay'] | win.curator | [] | 2023-01-05 | | | |
| | | Cutwail | [] | win.cutwail | ['NARWHAL SPIDER'] | 2022-02-14 | | | |
| | | CycBot | [] | win.cycbot | [] | 2018-01-19 | | | |
| | | DADJOKE | [] | win.dadjoke | ['Leviathan'] | 2020-02-09 | | | |
| | | DADSTACHE | [] | win.dadstache | ['Leviathan'] | 2020-07-11 | | | |
| | | Dairy | [] | win.dairy | ['Comment Crew'] | 2018-02-10 | | | |
| | | danbot | [] | win.danbot | [] | 2022-02-14 | | | |
| | | Daolpu | [] | win.daolpu | [] | 2024-10-21 | | | |
| | | DarkBit | [] | win.darkbit | [] | 2023-08-21 | | | |
| | | DARKDEW | [] | win.darkdew | [] | 2022-12-02 | | | |
| | | DarkLoader | [] | win.darkloader | [] | 2021-12-22 | | | |
| | | DarkMe | [] | win.darkme | [] | 2024-02-14 | | | |
| | | DarkMegi | [] | win.darkmegi | [] | 2018-06-28 | | | |
| | | Darkmoon | ['Chymine'] | win.darkmoon | [] | 2018-06-28 | | | |
| | | DarkPulsar | [] | win.darkpulsar | ['Equation Group'] | 2017-05-01 | | | |
| | | DarkRat | [] | win.darkrat | [] | 2022-04-15 | | | |
| | | DarkShell | [] | win.darkshell | [] | 2023-07-24 | | | |
| | | DarkTequila | [] | win.darktequila | [] | 2018-08-31 | | | |
| | | DarkVNC | [] | win.darkvnc | [] | 2023-05-21 | | | |
| | | Daserf | ['Muirim', 'Nioupale'] | win.daserf | ['Tick'] | 2020-05-23 | | | |
| | | DataExfiltrator | ['FileSender'] | win.data_exfiltrator | [] | 2021-07-21 | | | |
| | | Datper | [] | win.datper | ['Tick'] | 2021-03-02 | | | |
| | | Daxin | ['DELIMEAT'] | win.daxin | [] | 2023-07-19 | | | |
| | | DDKeylogger | [] | win.ddkeylogger | [] | 2020-05-27 | | | |
| | | DDKONG | [] | win.ddkong | ['RANCOR'] | 2022-07-29 | | | |
| | | DEADWOOD | ['Agrius', 'SQLShred', 'DETBOSIT'] | win.deadwood | [] | 2023-01-19 | | | |
| | | DeathRansom | ['deathransom', 'wacatac'] | win.deathransom | [] | 2024-05-17 | | | |
| | | DECAF | [] | win.decaf | [] | 2021-11-03 | | | |
| | | Defray | ['Glushkov'] | win.defray | [] | 2021-02-09 | | | |
| | | Delta(Alfa,Bravo, ...) | [] | win.deltas | ['Lazarus Group'] | 2017-07-12 | | | |
| | | DeltaStealer | [] | win.deltastealer | [] | 2023-06-01 | | | |
| | | Dented | [] | win.dented | [] | 2017-11-16 | | | |
| | | DeputyDog | [] | win.deputydog | ['Aurora Panda'] | 2020-06-08 | | | |
| | | DeroHE | [] | win.derohe | [] | 2021-01-21 | | | |
| | | DevOpt | [] | win.devopt | [] | 2023-04-25 | | | |
| | | Dexbia | ['CONIME'] | win.dexbia | ['Tonto Team'] | 2020-10-06 | | | |
| | | Dexter | ['LusyPOS'] | win.dexter | [] | 2022-11-12 | | | |
| | | Diavol | [] | win.diavol | [] | 2022-10-05 | | | |
| | | DICELOADER | ['Lizar'] | win.diceloader | [] | 2024-07-03 | | | |
| | | Dimnie | [] | win.dimnie | [] | 2017-04-06 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2024-04-11 | | | |
| | | DirCrypt | [] | win.dircrypt | [] | 2018-02-07 | | | |
| | | Disk Knight | [] | win.disk_knight | [] | 2023-11-13 | | | |
| | | DispCashBR | [] | win.dispcashbr | [] | 2020-05-18 | | | |
| | | DispenserXFS | [] | win.dispenserxfs | [] | 2019-03-07 | | | |
| | | DistTrack | ['Shamoon'] | win.disttrack | ['Shamoon', 'Magic Hound', 'Timberworm', 'COBALT GIPSY'] | 2023-01-19 | | | |
| | | Divergent | ['Novter'] | win.divergent | [] | 2020-05-18 | | | |
| | | Diztakun | [] | win.diztakun | [] | 2020-07-15 | | | |
| | | Dizzyvoid | ['Errorroot'] | win.dizzyvoid | ['Earth Lusca'] | 2024-03-25 | | | |
| | | DLRAT | [] | win.dlrat | [] | 2023-12-15 | | | |
| | | DMA Locker | [] | win.dma_locker | [] | 2016-05-31 | | | |
| | | DMSniff | [] | win.dmsniff | [] | 2023-08-31 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2020-11-09 | | | |
| | | DNSChanger | [] | win.dnschanger | [] | 2019-07-08 | | | |
| | | Bashlite | ['gayfgt', 'Gafgyt', 'qbot', 'torlus', 'lizkebab'] | elf.bashlite | [] | 2024-09-11 | | | |
| | | Brambul | ['SORRYBRUTE'] | win.brambul | ['Lazarus Group'] | 2022-03-02 | | | |
| | | BravoNC | [] | win.bravonc | ['Lazarus Group'] | 2017-05-23 | | | |
| | | BrbBot | [] | win.brbbot | [] | 2022-02-09 | | | |
| | | BreachRAT | [] | win.breach_rat | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Breakthrough | [] | win.breakthrough_loader | [] | 2018-09-21 | | | |
| | | Bredolab | [] | win.bredolab | [] | 2022-01-28 | | | |
| | | BROLER | ['down_new'] | win.broler | ['Tick'] | 2020-06-02 | | | |
| | | Bruh Wiper | [] | win.bruh_wiper | [] | 2023-01-25 | | | |
| | | BrutPOS | [] | win.brutpos | [] | 2018-04-23 | | | |
| | | BS2005 | [] | win.bs2005 | ['Mirage'] | 2021-04-29 | | | |
| | | BTCWare | [] | win.btcware | [] | 2024-05-14 | | | |
| | | BUBBLEWRAP | [] | win.bubblewrap | ['Temper Panda'] | 2019-04-12 | | | |
| | | Buer | ['Buerloader', 'RustyBuer'] | win.buer | [] | 2023-01-31 | | | |
| | | BUGHATCH | [] | win.bughatch | [] | 2023-05-15 | | | |
| | | Buhtrap | ['Ratopak'] | win.buhtrap | ['BuhTrap'] | 2021-02-06 | | | |
| | | Bundestrojaner | ['R2D2', '0zapftis'] | win.bundestrojaner | [] | 2018-09-10 | | | |
| | | Bunitu | [] | win.bunitu | [] | 2021-04-12 | | | |
| | | BunnyLoader | [] | win.bunnyloader | [] | 2024-03-25 | | | |
| | | Buterat | ['spyvoltar'] | win.buterat | [] | 2018-06-19 | | | |
| | | Buzus | ['Yimfoca'] | win.buzus | [] | 2018-10-18 | | | |
| | | BYEBY | [] | win.byeby | ['Calypso group', 'Karma Panda'] | 2022-07-25 | | | |
| | | c0d0so0 | [] | win.c0d0so0 | [] | 2016-04-25 | | | |
| | | CabArt | [] | win.cabart | [] | 2016-04-18 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28', 'Sandworm'] | 2024-06-13 | | | |
| | | CadelSpy | ['Cadelle'] | win.cadelspy | [] | 2023-10-17 | | | |
| | | CALMTHORN | [] | win.calmthorn | ['Tonto Team'] | 2021-02-09 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2024-05-14 | | | |
| | | campoloader | [] | win.campoloader | [] | 2021-08-06 | | | |