| | | TOUCHMOVE | [] | win.touchmove | ['Lazarus Group'] | 2023-11-27 | | | |
| | | TransBox | [] | win.transbox | [] | 2023-02-17 | | | |
| | | TreasureHunter | ['huntpos'] | win.treasurehunter | [] | 2018-05-14 | | | |
| | | Trochilus RAT | [] | win.trochilus_rat | ['APT31', 'GALLIUM', 'Stone Panda'] | 2022-09-20 | | | |
| | | Troldesh | ['Shade'] | win.troldesh | [] | 2023-05-02 | | | |
| | | Troll Stealer | [] | win.troll_stealer | ['Kimsuky'] | 2024-02-09 | | | |
| | | Tuoni | [] | win.tuoni | [] | 2024-05-14 | | | |
| | | turian | [] | win.turian | [] | 2023-06-09 | | | |
| | | TurlaRPC | [] | win.turla_rpc | ['Turla'] | 2022-12-01 | | | |
| | | Turla SilentMoon | ['BigBoss', 'Cacao', 'GoldenSky', 'HyperStack'] | win.turla_silentmoon | ['Turla'] | 2022-12-01 | | | |
| | | TURNEDUP | ['Notestuk'] | win.turnedup | ['APT33'] | 2020-08-21 | | | |
| | | TYPEFRAME | [] | win.typeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | TypeHash | ['SkinnyD'] | win.typehash | ['Tonto Team'] | 2020-10-08 | | | |
| | | UACMe | ['Akagi'] | win.uacme | [] | 2019-05-17 | | | |
| | | UDPoS | [] | win.udpos | [] | 2019-10-29 | | | |
| | | UFR Stealer | ['Usteal'] | win.ufrstealer | [] | 2019-02-22 | | | |
| | | UnderminerEK | [] | win.underminer_ek | [] | 2022-07-01 | | | |
| | | Unidentified 001 | [] | win.unidentified_001 | [] | 2016-12-29 | | | |
| | | Unidentified 003 | [] | win.unidentified_003 | [] | 2016-12-29 | | | |
| | | Unidentified 006 | [] | win.unidentified_006 | [] | 2016-05-10 | | | |
| | | Unidentified 013 (Korean) | [] | win.unidentified_013_korean_malware | [] | 2017-04-29 | | | |
| | | Unidentified 020 (Vault7) | [] | win.unidentified_020_cia_vault7 | ['Longhorn'] | 2017-05-02 | | | |
| | | Unidentified 023 | [] | win.unidentified_023 | [] | 2017-04-29 | | | |
| | | Unidentified 031 | [] | win.unidentified_031 | [] | 2017-08-22 | | | |
| | | Unidentified 037 | [] | win.unidentified_037 | [] | 2017-11-16 | | | |
| | | Unidentified 039 | [] | win.unidentified_039 | [] | 2017-11-16 | | | |
| | | Unidentified 041 | [] | win.unidentified_041 | [] | 2018-03-16 | | | |
| | | Unidentified 042 | [] | win.unidentified_042 | ['Lazarus Group'] | 2018-03-28 | | | |
| | | Unidentified 044 | [] | win.unidentified_044 | [] | 2018-05-17 | | | |
| | | Unidentified 045 | [] | win.unidentified_045 | [] | 2018-06-13 | | | |
| | | Unidentified 053 (Wonknu?) | [] | win.unidentified_053 | [] | 2018-09-12 | | | |
| | | Unidentified 068 | [] | win.unidentified_068 | ['APT32'] | 2019-12-18 | | | |
| | | Unidentified 069 (Zeus Unnamed2) | [] | win.unidentified_069 | [] | 2020-01-17 | | | |
| | | Unidentified 070 (Downloader) | [] | win.unidentified_070 | [] | 2020-01-20 | | | |
| | | Unidentified 071 (Zeus Unnamed1) | [] | win.unidentified_071 | [] | 2020-02-04 | | | |
| | | Unidentified 074 (Downloader) | [] | win.unidentified_074 | [] | 2024-02-06 | | | |
| | | PvzOut | [] | win.pvzout | ['Cleaver'] | 2017-05-21 | | | |
| | | PwndLocker | ['ProLock'] | win.pwndlocker | [] | 2022-01-25 | | | |
| | | pwnpos | [] | win.pwnpos | [] | 2020-10-05 | | | |
| | | Pykspa | [] | win.pykspa | [] | 2024-09-04 | | | |
| | | Qaccel | [] | win.qaccel | [] | 2018-07-24 | | | |
| | | Qadars | [] | win.qadars | [] | 2022-05-05 | | | |
| | | QHost | ['Tolouge'] | win.qhost | [] | 2024-09-11 | | | |
| | | QtBot | ['qtproject'] | win.qtbot | [] | 2017-11-07 | | | |
| | | QuantLoader | [] | win.quantloader | ['Guru Spider'] | 2022-02-14 | | | |
| | | QUARTERRIG | ['MUSKYBEAT', 'STATICNOISE'] | win.quarterrig | ['APT29'] | 2023-10-18 | | | |
| | | QUICKMUTE | [] | win.quickmute | ['Tonto Team'] | 2022-07-13 | | | |
| | | QuiteRAT | ['Acres'] | win.quiterat | ['Silent Chollima'] | 2023-08-28 | | | |
| | | r77 | ['r77 Rootkit'] | win.r77 | [] | 2023-04-28 | | | |
| | | r980 | [] | win.r980 | [] | 2017-02-15 | | | |
| | | Racket Downloader | [] | win.racket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Rad | [] | win.rad | [] | 2021-10-24 | | | |
| | | Radamant | [] | win.radamant | [] | 2017-02-15 | | | |
| | | RadRAT | [] | win.radrat | [] | 2018-04-23 | | | |
| | | RagnarLocker | [] | win.ragnarlocker | [] | 2024-03-18 | | | |
| | | Rambo | ['brebsd'] | win.rambo | ['DragonOK'] | 2022-09-19 | | | |
| | | Ramdo | [] | win.ramdo | [] | 2016-04-20 | | | |
| | | Ramnit | ['Nimnul'] | win.ramnit | [] | 2023-11-14 | | | |
| | | Ramsay | [] | win.ramsay | ['DarkHotel'] | 2022-12-01 | | | |
| | | Ranbyus | [] | win.ranbyus | [] | 2024-02-13 | | | |
| | | Ransoc | [] | win.ransoc | [] | 2016-12-28 | | | |
| | | RansomEXX | ['Ransom X', 'Defray777'] | win.ransomexx | ['GOLD DUPONT'] | 2023-06-09 | | | |
| | | Ransomlock | ['WinLock'] | win.ransomlock | [] | 2018-01-02 | | | |
| | | Rapid Ransom | [] | win.rapid_ransom | [] | 2022-11-15 | | | |
| | | Rarog | [] | win.rarog | [] | 2019-01-06 | | | |
| | | rarstar | [] | win.rarstar | ['Tick'] | 2022-11-15 | | | |
| | | Ratankba | ['QUICKRIDE'] | win.ratankba | ['Lazarus Group'] | 2023-08-13 | | | |
| | | RatankbaPOS | ['RATANKBAPOS'] | win.ratankbapos | ['Lazarus Group'] | 2023-08-14 | | | |
| | | RATel | [] | win.ratel | [] | 2023-08-25 | | | |
| | | RAWDOOR | [] | win.rawdoor | ['APT31'] | 2024-04-17 | | | |
| | | RawPOS | [] | win.rawpos | [] | 2020-04-17 | | | |
| | | RC2FM | [] | win.rc2fm | [] | 2022-08-25 | | | |
| | | RCtrl | [] | win.rctrl | ['APT 30'] | 2020-06-20 | | | |
| | | RDAT | ['GREYSTUFF'] | win.rdat | ['OilRig'] | 2022-07-29 | | | |
| | | ReactorBot | [] | win.reactorbot | [] | 2017-06-07 | | | |
| | | Reaver | [] | win.reaver | [] | 2019-05-17 | | | |
| | | RedAlpha | [] | win.redalpha | [] | 2018-07-06 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2024-02-16 | | | |
| | | RedLeaves | ['BUGJUICE'] | win.redleaves | ['Stone Panda'] | 2022-06-22 | | | |
| | | REDPEPPER | ['Adupib'] | win.redpepper | ['PLATINUM'] | 2020-01-01 | | | |
| | | REDSALT | ['Dipsind'] | win.redsalt | ['PLATINUM'] | 2020-01-20 | | | |
| | | REDSHAWL | [] | win.redshawl | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Redyms | [] | win.redyms | [] | 2018-10-18 | | | |
| | | Red Gambler | [] | win.red_gambler | [] | 2018-07-11 | | | |
| | | Regin | [] | win.regin | [] | 2022-03-22 | | | |
| | | RegretLocker | [] | win.regretlocker | [] | 2023-05-25 | | | |
| | | win.rekoobe | ['tinyshell.win', 'tshd.win'] | win.rekoobew | ['FIN7'] | 2021-12-08 | | | |
| | | Rekt Loader | [] | win.rektloader | [] | 2020-07-15 | | | |
| | | RemCom | ['RemoteCommandExecution'] | win.remcom | [] | 2024-04-11 | | | |
| | | Remexi | ['CACHEMONEY'] | win.remexi | ['APT39', 'Chafer'] | 2023-05-25 | | | |
| | | Remsec | [] | win.remsec_strider | ['ProjectSauron'] | 2020-04-21 | | | |
| | | Remy | ['WINDSHIELD'] | win.remy | [] | 2020-05-23 | | | |
| | | Rerdom | [] | win.rerdom | [] | 2018-08-10 | | | |
| | | Retefe | ['Tsukuba', 'Werdlod'] | win.retefe | [] | 2019-05-23 | | | |
| | | Retro | [] | win.retro | ['DarkHotel'] | 2021-12-17 | | | |
| | | Revenant | [] | win.revenant | [] | 2023-04-03 | | | |
| | | REvil | ['Sodinokibi', 'Sodin'] | win.revil | ['Pinchy Spider'] | 2024-06-12 | | | |
| | | RGDoor | [] | win.rgdoor | [] | 2021-08-09 | | | |
| | | Mail-O | [] | win.mail_o | [] | 2022-07-29 | | | |
| | | Makadocs | [] | win.makadocs | ['Poseidon Group'] | 2021-07-20 | | | |