| | | Kelihos | [] | win.kelihos | [] | 2021-07-02 | | | |
| | | KerrDown | [] | win.kerrdown | ['APT32'] | 2021-02-25 | | | |
| | | Ketrican | [] | win.ketrican | ['Mirage'] | 2021-02-25 | | | |
| | | Ketrum | [] | win.ketrum | ['Mirage'] | 2020-08-12 | | | |
| | | KeyBoy | ['TSSL'] | win.keyboy | ['Pirate Panda'] | 2020-06-18 | | | |
| | | Keyhole | [] | win.keyhole | [] | 2025-12-11 | | | |
| | | APT3 Keylogger | [] | win.keylogger_apt3 | ['UPS'] | 2023-05-15 | | | |
| | | KEYMARBLE | [] | win.keymarble | ['Lazarus Group'] | 2024-11-29 | | | |
| | | KGH_SPY | [] | win.kgh_spy | [] | 2021-07-20 | | | |
| | | KHRAT | [] | win.khrat | ['DragonOK'] | 2022-11-15 | | | |
| | | Kikothac | [] | win.kikothac | [] | 2018-09-06 | | | |
| | | KillAV | ['BURNTCIGAR'] | win.killav | [] | 2023-11-17 | | | |
| | | KillDisk | [] | win.killdisk | ['Sandworm', 'TeleBots'] | 2025-02-03 | | | |
| | | KimJongRat | [] | win.kimjongrat | [] | 2025-06-20 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2025-08-15 | | | |
| | | Kingminer | [] | win.kingminer | [] | 2024-09-06 | | | |
| | | KINS | ['Kasper Internet Non-Security', 'Maple'] | win.kins | [] | 2018-11-08 | | | |
| | | KIVARS | [] | win.kivars | [] | 2021-04-06 | | | |
| | | KiwiStealer | [] | win.kiwistealer | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | kkRAT | [] | win.kk_rat | [] | 2025-09-17 | | | |
| | | KleptoParasite Stealer | ['Joglog', 'Parasite'] | win.kleptoparasite_stealer | [] | 2020-02-16 | | | |
| | | KLRD | [] | win.klrd | ['Anunak'] | 2019-03-05 | | | |
| | | Knight | ['Cyclops'] | win.knight | [] | 2024-09-06 | | | |
| | | Knot | [] | win.knot | [] | 2021-01-04 | | | |
| | | Koadic | [] | win.koadic | ['APT28', 'Stone Panda'] | 2024-01-31 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2025-05-20 | | | |
| | | KOMPROGO | ['Splinter RAT'] | win.komprogo | ['APT32'] | 2019-06-17 | | | |
| | | Konni | [] | win.konni | ['APT37'] | 2025-09-09 | | | |
| | | KoobFace | [] | win.koobface | [] | 2022-01-28 | | | |
| | | Korlia | ['Bisonal'] | win.korlia | ['Tonto Team'] | 2023-09-20 | | | |
| | | KPOT Stealer | ['Khalesi', 'Kpot'] | win.kpot_stealer | [] | 2023-07-24 | | | |
| | | KrBanker | ['BlackMoon'] | win.krbanker | [] | 2024-04-23 | | | |
| | | KrDownloader | [] | win.krdownloader | [] | 2017-05-12 | | | |
| | | Kronos | ['Osiris'] | win.kronos | [] | 2023-05-21 | | | |
| | | KSL0T | [] | win.ksl0t | ['Turla'] | 2019-07-31 | | | |
| | | KTLVdoor | [] | win.ktlv_door | ['Earth Lusca'] | 2024-09-13 | | | |
| | | Kuaibu | ['Barys', 'Gofot', 'Kuaibpy'] | win.kuaibu8 | [] | 2017-03-29 | | | |
| | | KugelBlitz | [] | win.kugelblitz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Kuluoz | [] | win.kuluoz | [] | 2017-11-23 | | | |
| | | Kurton | [] | win.kurton | ['Comment Crew'] | 2018-02-13 | | | |
| | | Kutaki | [] | win.kutaki | [] | 2024-05-21 | | | |
| | | Kwampirs | [] | win.kwampirs | ['Orangeworm'] | 2022-03-15 | | | |
| | | Lambert | ['Plexor'] | win.lambert | ['Longhorn'] | 2022-05-04 | | | |
| | | LambLoad | ['OfficeCertTea'] | win.lambload | ['Lazarus Group'] | 2025-09-15 | | | |
| | | Laplas (Reverseshell) | [] | win.laplas_shell | [] | 2025-11-13 | | | |
| | | LatentBot | [] | win.latentbot | [] | 2022-06-09 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2026-02-25 | | | |
| | | Laturo Stealer | [] | win.laturo | [] | 2019-10-31 | | | |
| | | LazarDoor | [] | win.lazardoor | ['Lazarus Group'] | 2023-12-27 | | | |
| | | LazarLoader | [] | win.lazarloader | ['Lazarus Group'] | 2023-06-29 | | | |
| | | KillDisk (Lazarus) | ['KillDisk.NBO'] | win.lazarus_killdisk | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Laziok | [] | win.laziok | [] | 2022-03-01 | | | |
| | | LCPDot | [] | win.lcpdot | ['Lazarus Group'] | 2023-08-03 | | | |
| | | LDR4 | [] | win.ldr4 | [] | 2023-01-13 | | | |
| | | Leash | [] | win.leash | ['Magic Hound'] | 2017-12-15 | | | |
| | | Lechiket | [] | win.lechiket | [] | 2024-04-29 | | | |
| | | Lemon Duck | [] | win.lemonduck | [] | 2022-04-24 | | | |
| | | Leouncia | ['shoco'] | win.leouncia | ['APT5'] | 2021-11-02 | | | |
| | | Lethic | [] | win.lethic | [] | 2025-03-21 | | | |
| | | LIGHTBUNNY | [] | win.lightbunny | [] | 2023-04-25 | | | |
| | | LightlessCan | ['SIDESHOW'] | win.lightlesscan | ['Lazarus Group'] | 2025-11-05 | | | |
| | | LightNeuron | ['NETTRANS', 'XTRANS'] | win.lightneuron | ['Turla'] | 2025-04-28 | | | |
| | | LIGHTRAIL | [] | win.lightrail | [] | 2024-04-29 | | | |
| | | LIGHTWORK | [] | win.lightwork | [] | 2023-05-26 | | | |
| | | Lilith | [] | win.lilith | ['Silent Chollima', 'Tick'] | 2025-04-25 | | | |
| | | LinseningSvr | [] | win.linseningsvr | [] | 2020-05-27 | | | |
| | | Listrix | [] | win.listrix | ['Energetic Bear'] | 2020-04-21 | | | |
| | | LiteDuke | [] | win.liteduke | ['APT29'] | 2020-05-18 | | | |
| | | LOBSHOT | [] | win.lobshot | [] | 2023-07-21 | | | |
| | | LockerGoga | [] | win.lockergoga | ['FIN6'] | 2026-02-25 | | | |
| | | LockFile | [] | win.lockfile | [] | 2022-09-20 | | | |
| | | Locky (Decryptor) | [] | win.locky_decryptor | [] | 2016-04-19 | | | |
| | | LockPOS | [] | win.lock_pos | [] | 2018-02-26 | | | |
| | | LODEINFO | [] | win.lodeinfo | ['MirrorFace'] | 2025-02-19 | | | |
| | | LogPOS | [] | win.logpos | [] | 2022-09-19 | | | |
| | | Logtu | [] | win.logtu | [] | 2022-08-11 | | | |
| | | PLEAD | ['DRAWDOWN', 'GOODTIMES', 'Linopid'] | win.plead | ['BlackTech'] | 2021-03-02 | | | |
| | | ployx | [] | win.ployx | [] | 2018-09-19 | | | |
| | | Plurox | [] | win.plurox | [] | 2019-09-25 | | | |
| | | pngdowner | [] | win.pngdowner | ['APT2', 'Putter Panda'] | 2025-10-01 | | | |
| | | PocoDown | ['Blitz', 'PocoDownloader'] | win.pocodown | ['APT28'] | 2020-03-25 | | | |
| | | Poison Ivy | ['SPIVY', 'pivy', 'poisonivy'] | win.poison_ivy | ['GALLIUM', 'Molerats', 'Mustang Panda', 'Nightshade Panda', 'Pirate Panda', 'Stone Panda', 'TA428', 'Temper Panda'] | 2025-05-21 | | | |
| | | Poison RAT | [] | win.poison_rat | [] | 2020-08-12 | | | |
| | | Poldat | ['Zlib', 'KABOB'] | win.poldat | ['Samurai Panda', 'Stone Panda'] | 2020-01-15 | | | |
| | | PolPo | [] | win.polpo | ['EMISSARY PANDA'] | 2024-10-15 | | | |
| | | PolyglotDuke | [] | win.polyglotduke | ['APT29'] | 2020-05-23 | | | |
| | | Polyglot | [] | win.polyglot_ransom | [] | 2017-02-15 | | | |
| | | PolyVice | ['Chily'] | win.polyvice | [] | 2024-02-08 | | | |
| | | Pony | ['Siplog', 'Fareit'] | win.pony | ['Cobalt'] | 2024-06-05 | | | |
| | | PoohMilk Loader | [] | win.poohmilk | ['APT37'] | 2017-11-16 | | | |
| | | POORTRY | [] | win.poortry | [] | 2025-07-07 | | | |
| | | PortDoor | [] | win.portdoor | [] | 2023-04-06 | | | |
| | | PortStarter | ['SocksProxyGo'] | win.portstarter | ['Vanilla Tempest'] | 2026-02-25 | | | |
| | | poscardstealer | [] | win.poscardstealer | [] | 2018-09-11 | | | |
| | | PoSlurp | ['PUNCHTRACK'] | win.poslurp | ['FIN8'] | 2021-03-24 | | | |
| | | PostNapTea | ['SIGNBT'] | win.postnaptea | ['Lazarus Group'] | 2025-10-31 | | | |
| | | Poweliks | [] | win.poweliks | [] | 2020-04-23 | | | |
| | | PowerDuke | [] | win.powerduke | ['APT 29'] | 2023-07-28 | | | |
| | | PowerLoader | [] | win.powerloader | [] | 2020-07-15 | | | |
| | | PowerPool | [] | win.powerpool | [] | 2018-09-07 | | | |