| | | HemiGate | [] | win.hemigate | ['Earth Estries'] | 2024-02-02 | | | |
| | | Heriplor | [] | win.heriplor | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Hermes | [] | win.hermes | ['Lazarus Group'] | 2023-06-01 | | | |
| | | HermeticWiper | ['DriveSlayer', 'FoxBlade', 'KillDisk.NCV', 'NEARMISS'] | win.hermeticwiper | [] | 2024-04-23 | | | |
| | | HermeticWizard | [] | win.hermeticwizard | [] | 2023-03-20 | | | |
| | | HerpesBot | [] | win.herpes | [] | 2016-05-31 | | | |
| | | HesperBot | [] | win.hesperbot | [] | 2024-07-19 | | | |
| | | heyoka | [] | win.heyoka | [] | 2022-07-01 | | | |
| | | HIGHNOTE | ['ChyNode'] | win.highnote | ['APT17'] | 2019-07-31 | | | |
| | | HiKit | [] | win.hikit | ['Aurora Panda', 'Hurricane Panda'] | 2022-08-30 | | | |
| | | himan | [] | win.himan | [] | 2018-09-11 | | | |
| | | Himera Loader | [] | win.himera_loader | [] | 2020-05-18 | | | |
| | | Hive | [] | win.hive | [] | 2023-12-27 | | | |
| | | Hi-Zor RAT | [] | win.hi_zor_rat | [] | 2018-02-15 | | | |
| | | HLUX | [] | win.hlux | [] | 2016-04-26 | | | |
| | | Hodur | [] | win.hodur | ['MUSTANG PANDA'] | 2024-10-09 | | | |
| | | HOLERUN | [] | win.holerun | [] | 2023-04-25 | | | |
| | | homefry | [] | win.homefry | ['Leviathan'] | 2020-05-23 | | | |
| | | HookInjEx | [] | win.hookinjex | [] | 2020-09-21 | | | |
| | | HOPLIGHT | ['HANGMAN'] | win.hoplight | ['Lazarus Group'] | 2020-08-13 | | | |
| | | Hopscotch | [] | win.hopscotch | [] | 2021-02-06 | | | |
| | | HOTCROISSANT | [] | win.hotcroissant | ['Lazarus Group'] | 2020-04-17 | | | |
| | | HOTWAX | [] | win.hotwax | ['Lazarus Group'] | 2023-08-31 | | | |
| | | HtBot | [] | win.htbot | [] | 2017-05-29 | | | |
| | | htpRAT | [] | win.htprat | [] | 2017-12-13 | | | |
| | | HTran | ['HUC Packet Transmit Tool'] | win.htran | ['GALLIUM', 'UPS'] | 2024-03-04 | | | |
| | | HttpBrowser | ['HttpDump'] | win.httpbrowser | ['Wekby', 'EMISSARY PANDA'] | 2022-07-05 | | | |
| | | httpdropper | ['httpdr0pper'] | win.httpdropper | [] | 2018-09-13 | | | |
| | | HTTP(S) uploader | [] | win.httpsuploader | ['Lazarus Group'] | 2023-11-27 | | | |
| | | http_troy | [] | win.http_troy | [] | 2018-09-19 | | | |
| | | HUI Loader | [] | win.hui_loader | [] | 2023-08-25 | | | |
| | | Hunter Stealer | [] | win.hunter | [] | 2020-11-12 | | | |
| | | HuskLoader | [] | win.huskloader | [] | 2023-04-28 | | | |
| | | HyperBro | [] | win.hyperbro | ['EMISSARY PANDA'] | 2024-10-15 | | | |
| | | HyperSSL | ['FOCUSFJORD', 'Soldier', 'Sysupdate'] | win.hyperssl | ['EMISSARY PANDA'] | 2023-07-19 | | | |
| | | HZ RAT | [] | win.hzrat | [] | 2022-11-18 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2024-07-03 | | | |
| | | IcedID Downloader | [] | win.icedid_downloader | [] | 2023-10-13 | | | |
| | | Icefog | ['Fucobha'] | win.icefog | [] | 2022-07-29 | | | |
| | | win.icexloader | [] | win.icexloader | [] | 2022-07-13 | | | |
| | | Ice IX | [] | win.ice_ix | [] | 2020-03-02 | | | |
| | | IconDown | [] | win.icondown | ['BlackTech'] | 2019-12-08 | | | |
| | | IconicStealer | [] | win.iconic_stealer | ['Lazarus Group'] | 2023-12-14 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | IISpy | ['BadIIS'] | win.iispy | [] | 2024-09-13 | | | |
| | | ImprudentCook | [] | win.imprudentcook | ['Lazarus Group'] | 2023-12-19 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2024-05-23 | | | |
| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2024-05-23 | | | |
| | | Infy | ['Foudre'] | win.infy | [] | 2021-02-20 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16'] | 2020-04-16 | | | |
| | | IronWind | [] | win.ironwind | [] | 2023-11-14 | | | |
| | | IsaacWiper | ['LASAINRAW'] | win.isaacwiper | [] | 2023-05-21 | | | |
| | | ISFB | ['Gozi ISFB', 'IAP', 'Pandemyia'] | win.isfb | ['GOLD CABIN'] | 2023-10-17 | | | |
| | | ISMAgent | [] | win.ismagent | ['Greenbug', 'APT34'] | 2022-07-29 | | | |
| | | ISMDoor | [] | win.ismdoor | ['Greenbug'] | 2022-07-29 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsSpace | ['NfLog RAT'] | win.isspace | ['DragonOK', 'Samurai Panda'] | 2022-07-29 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | Jaff | [] | win.jaff | [] | 2023-02-21 | | | |
| | | Jaku | ['C3PRO-RACOON', 'EQUINOX', 'KCNA Infostealer', 'Reconcyc'] | win.jaku | ['DarkHotel'] | 2022-06-09 | | | |
| | | Jasus | [] | win.jasus | ['Cleaver'] | 2017-05-21 | | | |
| | | JessieConTea | [] | win.jessiecontea | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | JinxLoader | [] | win.jinxloader | [] | 2024-01-31 | | | |
| | | JLORAT | [] | win.jlorat | [] | 2023-04-26 | | | |
| | | Joanap | [] | win.joanap | ['Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JripBot | [] | win.jripbot | ['WildNeutron'] | 2020-03-13 | | | |
| | | StegoLoader | [] | win.stegoloader | [] | 2017-02-15 | | | |
| | | Stinger | [] | win.stinger | [] | 2018-03-19 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2024-05-14 | | | |
| | | Stormwind | [] | win.stormwind | ['Evilnum'] | 2022-12-14 | | | |
| | | STOWAWAY | [] | win.stowaway | [] | 2023-03-29 | | | |
| | | Stration | [] | win.stration | [] | 2018-07-24 | | | |
| | | StrelaStealer | [] | win.strelastealer | [] | 2024-07-17 | | | |
| | | Stresspaint | [] | win.stresspaint | [] | 2018-04-20 | | | |
| | | StrifeWater RAT | [] | win.strifewater_rat | ['MosesStaff'] | 2023-12-04 | | | |
| | | StrongPity | [] | win.strongpity | ['PROMETHIUM', 'StrongPity'] | 2023-06-09 | | | |
| | | Stuxnet | [] | win.stuxnet | [] | 2023-10-05 | | | |
| | | Subzero | ['Corelump', 'Jumplump'] | win.subzero | [] | 2024-02-08 | | | |
| | | SunCrypt | [] | win.suncrypt | [] | 2023-06-09 | | | |
| | | SunOrcal | [] | win.sunorcal | [] | 2017-11-21 | | | |
| | | SuppoBox | ['Bayrob', 'Nivdort', 'pizd'] | win.suppobox | [] | 2024-05-17 | | | |
| | | SVCReady | [] | win.svcready | [] | 2023-06-09 | | | |
| | | swen | [] | win.swen | [] | 2019-07-31 | | | |
| | | Sword | [] | win.sword | ['Comment Crew'] | 2018-02-13 | | | |
| | | sykipot | ['getkys', 'Wkysol'] | win.sykipot | ['Samurai Panda'] | 2022-03-07 | | | |
| | | SyncCrypt | [] | win.synccrypt | [] | 2017-09-14 | | | |
| | | SynFlooder | [] | win.synflooder | ['Cleaver'] | 2017-05-21 | | | |
| | | Sys10 | [] | win.sys10 | ['Naikon'] | | | | |
| | | Syscon | [] | win.syscon | [] | 2020-02-04 | | | |
| | | SysGet | [] | win.sysget | ['DragonOK'] | 2021-04-29 | | | |
| | | SysJoker | [] | win.sysjoker | [] | 2024-01-05 | | | |
| | | Sysraw Stealer | ['Clipsa'] | win.sysraw_stealer | [] | 2019-08-07 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | [] | 2024-08-29 | | | |