| | | Oderoor | ['Bobax', 'Kraken'] | win.oderoor | [] | 2024-02-21 | | | |
| | | Odinaff | [] | win.odinaff | [] | 2020-04-21 | | | |
| | | OLDBAIT | ['Sasfis'] | win.oldbait | ['APT28'] | 2022-05-04 | | | |
| | | Olympic Destroyer | ['SOURGRAPE'] | win.olympic_destroyer | [] | 2024-04-23 | | | |
| | | Ondritols | ['Onedrivetools'] | win.ondritols | [] | 2024-10-25 | | | |
| | | ONHAT | [] | win.onhat | [] | 2020-05-26 | | | |
| | | Oni | [] | win.oni | [] | 2019-08-14 | | | |
| | | OnionDuke | [] | win.onionduke | ['APT29'] | 2020-07-06 | | | |
| | | OnlinerSpambot | ['SBot', 'Onliner'] | win.onliner | [] | 2023-01-25 | | | |
| | | Opachki | [] | win.opachki | [] | 2018-06-28 | | | |
| | | OpenCarrot | [] | win.open_carrot | ['APT37'] | 2023-08-07 | | | |
| | | OpBlockBuster | [] | win.op_blockbuster | ['Lazarus Group'] | 2017-05-17 | | | |
| | | ORANGEADE | [] | win.orangeade | ['APT 30'] | 2019-04-17 | | | |
| | | OrcaRAT | [] | win.orcarat | [] | 2020-05-23 | | | |
| | | Orchard | ['Antavmu'] | win.orchard | [] | 2023-05-17 | | | |
| | | ORPCBackdoor | [] | win.orpcbackdoor | [] | 2025-06-05 | | | |
| | | Oski Stealer | [] | win.oski | [] | 2025-05-01 | | | |
| | | Outlook Backdoor | ['FACADE'] | win.outlook_backdoor | ['Turla'] | 2020-07-24 | | | |
| | | Owlproxy | [] | win.owlproxy | [] | 2022-07-05 | | | |
| | | paladin | [] | win.paladin | ['Pitty Panda'] | 2018-09-30 | | | |
| | | PandaBanker | ['ZeusPanda'] | win.pandabanker | [] | 2022-01-25 | | | |
| | | Pandora | [] | win.pandora | [] | 2022-09-20 | | | |
| | | Parallax RAT | ['ParallaxRAT'] | win.parallax | [] | 2025-04-28 | | | |
| | | parasite_http | [] | win.parasite_http | [] | 2018-09-13 | | | |
| | | PATHLOADER | [] | win.pathloader | [] | 2025-04-25 | | | |
| | | PathWiper | [] | win.pathwiper | [] | 2025-06-05 | | | |
| | | Pay2Key | ['Cobalt'] | win.pay2key | [] | 2021-05-13 | | | |
| | | PayloadBIN | [] | win.payloadbin | ['Evil Corp'] | 2022-07-01 | | | |
| | | PcShare | [] | win.pcshare | ['Pirate Panda'] | 2022-07-29 | | | |
| | | PEBBLEDASH | [] | win.pebbledash | [] | 2025-05-23 | | | |
| | | Penco | [] | win.penco | [] | 2018-07-24 | | | |
| | | PetrWrap | [] | win.petrwrap | [] | 2023-07-22 | | | |
| | | Petya | [] | win.petya | [] | 2023-10-30 | | | |
| | | pgift | ['ReRol'] | win.pgift | ['Pitty Panda'] | 2018-01-25 | | | |
| | | PhanDoor | [] | win.phandoor | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-12-08 | | | |
| | | Phobos | [] | win.phobos | [] | 2025-07-21 | | | |
| | | Phoenix Locker | [] | win.phoenix_locker | [] | 2025-03-07 | | | |
| | | PHOREAL | ['Rizzo'] | win.phoreal | ['APT32'] | 2022-03-08 | | | |
| | | PHOTOFORK | [] | win.photofork | [] | 2024-12-11 | | | |
| | | PHOTOLITE | [] | win.photolite | [] | 2023-08-14 | | | |
| | | PhotoLoader | ['GZIPLOADER'] | win.photoloader | [] | 2024-04-03 | | | |
| | | PICKPOCKET | [] | win.pickpocket | ['APT34'] | 2021-06-29 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2025-11-25 | | | |
| | | PILLOWMINT | [] | win.pillowmint | ['Anunak'] | 2023-05-23 | | | |
| | | PinchDuke | [] | win.pinchduke | ['APT29'] | 2022-11-15 | | | |
| | | pipcreat | [] | win.pipcreat | [] | 2018-09-11 | | | |
| | | PipeMagic | [] | win.pipemagic | [] | 2025-04-25 | | | |
| | | PipeMon | [] | win.pipemon | ['Winnti Umbrella'] | 2023-05-23 | | | |
| | | pirpi | ['SHOTPUT', 'CookieCutter'] | win.pirpi | ['UPS'] | 2020-05-23 | | | |
| | | Pitou | [] | win.pitou | [] | 2024-09-04 | | | |
| | | PittyTiger RAT | [] | win.pittytiger_rat | [] | 2018-01-19 | | | |
| | | Pkybot | ['Pykbot', 'TBag', 'Bublik'] | win.pkybot | [] | 2018-02-15 | | | |
| | | PLAINTEE | [] | win.plaintee | ['RANCOR'] | 2022-07-29 | | | |
| | | playwork | [] | win.playwork | [] | 2018-09-13 | | | |
| | | PLEAD | ['DRAWDOWN', 'GOODTIMES', 'Linopid'] | win.plead | ['BlackTech'] | 2021-03-02 | | | |
| | | ployx | [] | win.ployx | [] | 2018-09-19 | | | |
| | | IISniff | [] | win.iisniff | [] | 2021-08-09 | | | |
| | | ImprudentCook | [] | win.imprudentcook | ['Lazarus Group'] | 2025-09-15 | | | |
| | | Industrial Spy | [] | win.industrial_spy | [] | 2022-08-02 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2025-04-25 | | | |
| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2025-04-25 | | | |
| | | InnaputRAT | [] | win.innaput_rat | [] | 2018-05-14 | | | |
| | | Interception | [] | win.interception | ['Lazarus Group'] | 2023-08-13 | | | |
| | | InvisiMole | [] | win.invisimole | [] | 2022-11-28 | | | |
| | | IRONHALO | [] | win.ironhalo | ['APT 16', 'APT16'] | 2025-10-01 | | | |
| | | IronWind | [] | win.ironwind | [] | 2023-11-14 | | | |
| | | IsaacWiper | ['LASAINRAW'] | win.isaacwiper | [] | 2023-05-21 | | | |
| | | ISFB | ['Gozi ISFB', 'IAP', 'Pandemyia'] | win.isfb | ['GOLD CABIN'] | 2025-12-19 | | | |
| | | ISMAgent | [] | win.ismagent | ['Greenbug', 'APT34'] | 2022-07-29 | | | |
| | | ISMDoor | [] | win.ismdoor | ['Greenbug'] | 2022-07-29 | | | |
| | | ISR Stealer | [] | win.isr_stealer | [] | 2017-07-18 | | | |
| | | IsSpace | ['NfLog RAT'] | win.isspace | ['DragonOK', 'Samurai Panda'] | 2022-07-29 | | | |
| | | JackPOS | [] | win.jackpos | [] | 2018-04-26 | | | |
| | | Jaff | [] | win.jaff | [] | 2023-02-21 | | | |
| | | Jaku | ['C3PRO-RACOON', 'EQUINOX', 'KCNA Infostealer', 'Reconcyc'] | win.jaku | ['DarkHotel'] | 2022-06-09 | | | |
| | | Jasus | [] | win.jasus | ['Cleaver'] | 2017-05-21 | | | |
| | | JessieConTea | [] | win.jessiecontea | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Jimmy | [] | win.jimmy | [] | | | | |
| | | JinxLoader | [] | win.jinxloader | [] | 2024-01-31 | | | |
| | | JLORAT | [] | win.jlorat | [] | 2023-04-26 | | | |
| | | Joanap | [] | win.joanap | ['Lazarus Group'] | 2020-08-18 | | | |
| | | Joao | [] | win.joao | [] | 2017-08-23 | | | |
| | | Jolob | [] | win.jolob | [] | 2018-05-03 | | | |
| | | JripBot | [] | win.jripbot | ['WildNeutron'] | 2020-03-13 | | | |
| | | JSSLoader | [] | win.jssloader | ['Anunak'] | 2023-09-13 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-06-24 | | | |
| | | Jupiter | ['EarlyRAT'] | win.jupiter | ['Silent Chollima'] | 2023-09-01 | | | |
| | | KAgent | [] | win.kagent | ['Cleaver'] | 2017-05-21 | | | |
| | | Kaolin RAT | ['KaolinTea'] | win.kaolin_rat | ['Lazarus Group'] | 2025-11-21 | | | |
| | | Kapeka | ['ICYWELL', 'KNUCKLETOUCH', 'QUEUESEED', 'WRONGSENS'] | win.kapeka | ['Sandworm'] | 2024-09-13 | | | |
| | | Karagany | ['Karagny'] | win.karagany | ['Energetic Bear'] | 2021-10-26 | | | |
| | | Kardon Loader | [] | win.kardonloader | [] | 2018-06-21 | | | |
| | | Karius | [] | win.karius | [] | 2022-08-28 | | | |
| | | Karma | [] | win.karma | [] | 2022-04-24 | | | |
| | | KasperAgent | [] | win.kasperagent | [] | 2017-07-11 | | | |
| | | Katz Stealer | [] | win.katz_stealer | [] | 2025-12-30 | | | |
| | | KazyLoader | [] | win.kazyloader | [] | 2022-03-08 | | | |
| | | KDC Sponge | [] | win.kdcsponge | [] | 2021-12-07 | | | |
| | | Kegotip | [] | win.kegotip | [] | 2022-02-14 | | | |