| | | Rofin | [] | win.rofin | [] | 2016-04-20 | | | |
| | | Rokku | [] | win.rokku | [] | 2020-12-20 | | | |
| | | RollSling | [] | win.roll_sling | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Rombertik | ['CarbonGrabber'] | win.rombertik | [] | 2017-05-21 | | | |
| | | ROMCOM RAT | ['PEAPOD', 'SingleCamper', 'SnipBot'] | win.romcom_rat | [] | 2024-10-29 | | | |
| | | Romeo(Alfa,Bravo, ...) | [] | win.romeos | ['Lazarus Group'] | 2017-05-17 | | | |
| | | Rook | [] | win.rook | [] | 2023-05-25 | | | |
| | | Roopirs | [] | win.roopirs | [] | 2018-07-24 | | | |
| | | Roopy | [] | win.roopy | [] | 2023-04-26 | | | |
| | | Rorschach Ransomware | ['BabLock'] | win.rorschach | [] | 2023-04-25 | | | |
| | | Rover | [] | win.rover | [] | 2020-11-04 | | | |
| | | Rovnix | ['Mayachok', 'Cidox', 'BkLoader'] | win.rovnix | [] | 2022-05-25 | | | |
| | | RoyalCli | [] | win.royalcli | ['Mirage'] | 2021-04-29 | | | |
| | | Royal DNS | [] | win.royal_dns | ['Mirage'] | 2021-04-29 | | | |
| | | RTM Locker | ['Read The Manual Locker'] | win.rtm_locker | [] | 2023-11-13 | | | |
| | | rtpos | [] | win.rtpos | [] | 2022-02-01 | | | |
| | | Ruckguv | [] | win.ruckguv | [] | 2018-03-01 | | | |
| | | Rumish | [] | win.rumish | [] | 2018-07-24 | | | |
| | | Rustock | [] | win.rustock | [] | 2022-02-14 | | | |
| | | Ryuk | [] | win.ryuk | ['FIN6', 'GRIM SPIDER', 'UNC1878', 'WIZARD SPIDER'] | 2024-06-12 | | | |
| | | Ryuk Stealer | ['Sidoh'] | win.ryuk_stealer | [] | 2021-09-02 | | | |
| | | SafeNet | [] | win.safenet | [] | 2020-01-22 | | | |
| | | SAGE | ['Saga'] | win.sage_ransom | [] | 2019-07-20 | | | |
| | | SaiGon | [] | win.saigon | [] | 2020-09-01 | | | |
| | | Saint Bot | [] | win.saint_bot | [] | 2022-07-25 | | | |
| | | Sakula RAT | ['Sakurel'] | win.sakula_rat | ['APT 26', 'Hurricane Panda'] | 2024-05-21 | | | |
| | | Salgorea | ['BadCake'] | win.salgorea | ['APT32'] | 2020-05-06 | | | |
| | | Sality | [] | win.sality | ['Salty Spider'] | 2023-11-14 | | | |
| | | Sanny | [] | win.sanny | [] | 2020-06-08 | | | |
| | | SappyCache | [] | win.sappycache | [] | 2020-07-15 | | | |
| | | Sarhust | ['ENDCMD', 'Hussarini'] | win.sarhust | [] | 2020-06-30 | | | |
| | | Sasfis | ['Oficla'] | win.sasfis | [] | 2018-11-28 | | | |
| | | Satan | ['5ss5c', 'DBGer', 'Lucky Ransomware'] | win.satan | [] | 2020-01-16 | | | |
| | | Satana | [] | win.satana | [] | 2023-06-09 | | | |
| | | Satellite Turla | [] | win.satellite_turla | ['Turla'] | 2022-11-17 | | | |
| | | Sathurbot | [] | win.sathurbot | [] | 2020-02-03 | | | |
| | | ScanLine | [] | win.scanline | ['Volt Typhoon'] | 2024-02-08 | | | |
| | | ScanPOS | [] | win.scanpos | [] | 2022-09-19 | | | |
| | | Scarabey | ['MVP', 'Scarab-Russian', 'Scarab'] | win.scarabey | [] | 2019-08-19 | | | |
| | | ScareCrow | [] | win.scarecrow | [] | 2022-12-19 | | | |
| | | Scieron | [] | win.scieron | [] | 2022-09-20 | | | |
| | | Scout | [] | win.scout | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Scranos | [] | win.scranos | [] | 2019-07-12 | | | |
| | | ScreenCap | [] | win.screencap | [] | 2022-10-24 | | | |
| | | SDBbot | [] | win.sdbbot | ['TA505'] | 2023-02-17 | | | |
| | | SeaSalt | [] | win.seasalt | ['Comment Crew'] | 2018-02-13 | | | |
| | | SeDll | [] | win.sedll | ['Leviathan'] | 2020-05-23 | | | |
| | | Sedreco | ['azzy', 'eviltoss'] | win.sedreco | ['APT28'] | 2022-05-04 | | | |
| | | Miuref | [] | win.miuref | [] | 2016-04-19 | | | |
| | | MMON | ['Kaptoxa'] | win.mmon | [] | 2022-01-05 | | | |
| | | MM Core | [] | win.mm_core | [] | 2017-04-06 | | | |
| | | Mocton | [] | win.mocton | [] | 2016-04-19 | | | |
| | | Mofksys | [] | win.mofksys | [] | 2021-06-16 | | | |
| | | Moker | [] | win.moker | [] | 2017-05-01 | | | |
| | | Mokes | [] | win.mokes | [] | 2020-03-09 | | | |
| | | Mole | [] | win.mole | [] | 2017-12-13 | | | |
| | | Molerat Loader | [] | win.molerat_loader | ['Molerats'] | 2022-02-09 | | | |
| | | Monero Miner | ['CoinMiner'] | win.monero_miner | [] | 2024-09-04 | | | |
| | | mongall | [] | win.mongall | [] | 2022-07-01 | | | |
| | | MontysThree | ['MT3'] | win.montysthree | [] | 2020-10-12 | | | |
| | | MoonBounce | [] | win.moonbounce | ['APT41'] | 2022-05-29 | | | |
| | | MoonWalk | ['CurveLast', 'SneakCross'] | win.moonwalk | ['APT41'] | 2024-11-04 | | | |
| | | MoonWind | [] | win.moonwind | [] | 2017-04-05 | | | |
| | | MoriAgent | [] | win.moriagent | ['MuddyWater'] | 2023-06-19 | | | |
| | | MortalKombat | [] | win.mortalkombat | [] | 2023-02-15 | | | |
| | | Mortis | [] | win.mortis | [] | 2024-02-05 | | | |
| | | Morto | [] | win.morto | [] | 2018-06-28 | | | |
| | | Mosquito | [] | win.mosquito | ['Turla'] | 2023-01-19 | | | |
| | | Moure | [] | win.moure | [] | 2016-04-19 | | | |
| | | mozart | [] | win.mozart | [] | 2023-05-26 | | | |
| | | MPKBot | ['MPK'] | win.mpkbot | ['Magic Hound', 'Rocket Kitten'] | 2019-02-17 | | | |
| | | MQsTTang | ['QMAGENT'] | win.mqsttang | ['MUSTANG PANDA'] | 2023-09-08 | | | |
| | | MRAC | [] | win.mrac | [] | 2022-02-01 | | | |
| | | MrDec | [] | win.mrdec | [] | 2020-03-27 | | | |
| | | MulCom | [] | win.mulcom | [] | 2022-08-26 | | | |
| | | Multigrain POS | [] | win.multigrain_pos | [] | 2018-02-07 | | | |
| | | murkytop | [] | win.murkytop | ['Leviathan'] | 2020-05-23 | | | |
| | | Mutabaha | [] | win.mutabaha | [] | 2017-02-15 | | | |
| | | MyDogs | [] | win.mydogs | ['Kimsuki'] | 2021-05-03 | | | |
| | | MyDoom | ['Novarg', 'Mimail'] | win.mydoom | [] | 2025-02-25 | | | |
| | | MyloBot | ['FakeDGA', 'WillExec'] | win.mylobot | [] | 2023-11-17 | | | |
| | | Mystic Stealer | [] | win.mystic_stealer | [] | 2023-07-11 | | | |
| | | Nabucur | [] | win.nabucur | [] | 2016-05-31 | | | |
| | | NACHOCHEESE | ['Cyruslish', 'TWOPENCE', 'VIVACIOUSGIFT'] | win.nachocheese | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Nagini | [] | win.nagini | [] | 2017-02-15 | | | |
| | | Naikon | ['Sacto'] | win.naikon | ['Naikon'] | 2021-08-09 | | | |
| | | Nautilus | [] | win.nautilus | ['APT34', 'Turla'] | 2020-05-23 | | | |
| | | NavRAT | ['JinhoSpy'] | win.navrat | ['Kimsuky'] | 2022-11-28 | | | |
| | | nccTrojan | [] | win.ncctrojan | ['TA428'] | 2022-08-11 | | | |
| | | Neconyd | [] | win.neconyd | [] | 2024-05-21 | | | |
| | | Necurs | ['nucurs'] | win.necurs | ['MONTY SPIDER'] | 2023-10-18 | | | |
| | | NedDnLoader | [] | win.neddnloader | ['Lazarus Group'] | 2023-11-27 | | | |
| | | Nefilim | ['Nephilim'] | win.nefilim | [] | 2022-07-28 | | | |
| | | Nemim | ['Nemain'] | win.nemim | ['DarkHotel'] | 2020-09-15 | | | |
| | | Nemty | [] | win.nemty | [] | 2022-08-28 | | | |
| | | NESTEGG | [] | win.nestegg | ['Lazarus Group'] | 2023-08-14 | | | |
| | | NETEAGLE | ['Neteagle_Scout', 'ScoutEagle'] | win.neteagle | ['APT 30'] | 2022-08-25 | | | |
| | | NetKey | [] | win.netkey | [] | 2019-09-06 | | | |
| | | Netrepser | [] | win.netrepser_keylogger | [] | 2017-05-12 | | | |
| | | NetSpy | [] | win.netspy | [] | 2023-10-11 | | | |