| | | Unidentified 078 (Zebrocy Nim Loader?) | [] | win.unidentified_078 | ['APT28'] | 2020-09-01 | | | |
| | | Unidentified 080 | [] | win.unidentified_080 | ['EMISSARY PANDA'] | 2021-05-12 | | | |
| | | Unidentified 087 | [] | win.unidentified_087 | [] | 2021-11-02 | | | |
| | | Unidentified 088 (Nim Ransomware) | [] | win.unidentified_088 | [] | 2021-12-15 | | | |
| | | Unidentified 091 | [] | win.unidentified_091 | [] | 2022-04-07 | | | |
| | | Unidentified 092 (Confucius Backdoor) | [] | win.unidentified_092 | [] | 2022-07-15 | | | |
| | | Unidentified 095 (Iranian Wiper) | [] | win.unidentified_095 | [] | 2022-09-26 | | | |
| | | Unidentified 096 (Keylogger) | [] | win.unidentified_096 | ['TA410'] | 2022-09-30 | | | |
| | | Unidentified 098 (APT29 Slack Downloader) | [] | win.unidentified_098 | ['APT29'] | 2022-12-20 | | | |
| | | Unidentified 099 (APT29 Dropbox Loader) | [] | win.unidentified_099 | ['APT29'] | 2024-02-02 | | | |
| | | Unidentified 100 (APT-Q-12) | [] | win.unidentified_100 | ['APT-Q-12'] | 2023-12-15 | | | |
| | | Unidentified 104 | [] | win.unidentified_104 | [] | 2023-06-01 | | | |
| | | Unidentified 105 | [] | win.unidentified_105 | ['Silent Chollima'] | 2023-07-24 | | | |
| | | Unidentified 106 | [] | win.unidentified_106 | [] | 2023-10-18 | | | |
| | | Unidentified 107 (APT29) | ['ICEBEAT'] | win.unidentified_107 | [] | 2023-10-18 | | | |
| | | Unidentified 108 | [] | win.unidentified_108 | [] | 2023-07-31 | | | |
| | | Unidentified 109 (Lazarus?) | ['IMEEX'] | win.unidentified_109 | [] | 2024-10-20 | | | |
| | | Unidentified 110 (RustyFlag) | [] | win.unidentified_110 | [] | 2023-09-20 | | | |
| | | Unidentified 112 (Rust-based Stealer) | [] | win.unidentified_112 | [] | 2023-12-27 | | | |
| | | Unidentified 113 (RAT) | [] | win.unidentified_113 | [] | 2024-01-22 | | | |
| | | Unidentified 115 (Nim Loader) | [] | win.unidentified_115 | [] | 2024-03-06 | | | |
| | | Unidentified 116 (Miner) | [] | win.unidentified_116 | [] | 2024-08-29 | | | |
| | | UPAS | ['Rombrast'] | win.upas | [] | 2018-06-13 | | | |
| | | Upatre | [] | win.upatre | [] | 2023-04-18 | | | |
| | | Urausy | [] | win.urausy | [] | | | | |
| | | UrlZone | ['Bebloh', 'Shiotob'] | win.urlzone | [] | 2021-05-31 | | | |
| | | Uroburos | ['Snake'] | win.uroburos | ['Turla'] | 2023-08-11 | | | |
| | | USBferry | [] | win.usbferry | ['Pirate Panda'] | 2021-12-17 | | | |
| | | VaporRage | ['BOOMMIC'] | win.vapor_rage | ['APT29'] | 2024-02-02 | | | |
| | | Varenyky | [] | win.varenyky | [] | 2019-12-19 | | | |
| | | Vawtrak | ['Catch', 'grabnew', 'NeverQuest'] | win.vawtrak | ['Lunar Spider'] | 2023-03-20 | | | |
| | | VEILEDSIGNAL | [] | win.veiledsignal | ['Lazarus Group'] | 2023-05-26 | | | |
| | | Velso | [] | win.velso | [] | 2018-02-13 | | | |
| | | Vendetta | [] | win.vendetta | [] | 2023-04-08 | | | |
| | | Vermilion Strike | [] | win.vermilion_strike | [] | 2021-09-14 | | | |
| | | Vflooder | [] | win.vflooder | [] | 2022-11-01 | | | |
| | | VHD Ransomware | [] | win.vhd_ransomware | [] | 2022-06-27 | | | |
| | | VictoryGate | [] | win.victorygate | [] | 2022-02-19 | | | |
| | | VIGILANT CLEANER | ['VIGILANT CHECKER'] | win.vigilant_cleaner | [] | 2021-08-20 | | | |
| | | virdetdoor | [] | win.virdetdoor | [] | 2018-09-13 | | | |
| | | VIRTUALGATE | [] | win.virtualgate | [] | 2022-10-05 | | | |
| | | VM Zeus | ['VMzeus', 'ZeusVM', 'Zberp'] | win.vmzeus | [] | 2018-05-22 | | | |
| | | Vobfus | ['Beebone'] | win.vobfus | [] | 2022-11-12 | | | |
| | | Vohuk | [] | win.vohuk | [] | 2022-12-19 | | | |
| | | Void | ['VoidCrypt'] | win.void | [] | 2021-10-11 | | | |
| | | Voidoor | [] | win.voidoor | [] | 2023-07-19 | | | |
| | | Voldemort | [] | win.voldemort | [] | 2024-10-23 | | | |
| | | Volgmer | ['FALLCHILL', 'Manuscrypt'] | win.volgmer | ['Lazarus Group'] | 2023-11-27 | | | |
| | | VSingle | [] | win.vsingle | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | vSkimmer | [] | win.vskimmer | [] | 2018-04-26 | | | |
| | | Vyveva RAT | [] | win.vyveva | ['Lazarus Group'] | 2023-09-18 | | | |
| | | w32times | [] | win.w32times | ['UPS'] | 2018-04-13 | | | |
| | | WannaHusky | [] | win.wannahusky | [] | 2022-04-08 | | | |
| | | Warezov | ['Stration', 'Opnis'] | win.warezov | [] | 2024-04-29 | | | |
| | | WarHawk | [] | win.warhawk | [] | 2024-08-29 | | | |
| | | WastedLoader | [] | win.wastedloader | [] | 2022-07-01 | | | |
| | | WastedLocker | [] | win.wastedlocker | [] | 2022-08-02 | | | |
| | | WaterMiner | [] | win.waterminer | [] | 2018-08-01 | | | |
| | | WaterSpout | [] | win.waterspout | ['IXESHE'] | 2017-05-21 | | | |
| | | WebbyTea | [] | win.webbytea | ['Lazarus Group'] | 2023-12-19 | | | |
| | | WebC2-AdSpace | [] | win.webc2_adspace | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Ausov | [] | win.webc2_ausov | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Bolid | [] | win.webc2_bolid | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Cson | [] | win.webc2_cson | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-DIV | [] | win.webc2_div | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-GreenCat | [] | win.webc2_greencat | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Head | [] | win.webc2_head | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Kt3 | [] | win.webc2_kt3 | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Qbp | [] | win.webc2_qbp | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Rave | [] | win.webc2_rave | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Table | [] | win.webc2_table | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-UGX | [] | win.webc2_ugx | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Yahoo | [] | win.webc2_yahoo | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebMonitor RAT | ['RevCode'] | win.webmonitor | [] | 2020-11-19 | | | |
| | | WhiskerSpy | [] | win.whiskerspy | [] | 2023-02-24 | | | |
| | | WhiteBird | [] | win.whitebird | [] | 2020-10-02 | | | |
| | | WhiteBlackCrypt | ['WARYLOOK'] | win.whiteblackcrypt | [] | 2022-03-07 | | | |
| | | WinDealer | [] | win.windealer | [] | 2023-12-27 | | | |
| | | WinInetLoader | ['LIDSHOT'] | win.wininetloader | ['Lazarus Group'] | 2023-12-19 | | | |
| | | WinMM | [] | win.winmm | ['Naikon'] | | | | |
| | | WinorDLL64 | [] | win.winordll64 | ['Lazarus Group'] | 2023-02-27 | | | |
| | | Winsloader | [] | win.winsloader | ['Pirate Panda'] | | | | |
| | | WMI Ghost | ['Wimmie', 'Syndicasec'] | win.wmighost | ['Thrip'] | 2018-06-22 | | | |
| | | WndTest | [] | win.wndtest | ['Cleaver'] | 2017-05-21 | | | |
| | | Wonknu | [] | win.wonknu | [] | 2022-07-29 | | | |
| | | woody | [] | win.woody | [] | 2018-04-26 | | | |
| | | Woody RAT | [] | win.woodyrat | [] | 2022-08-05 | | | |
| | | Woolger | ['WoolenLogger'] | win.woolger | ['Rocket Kitten'] | 2022-04-29 | | | |
| | | WORMHOLE | [] | win.wormhole | ['Lazarus Group'] | 2023-08-14 | | | |
| | | WpBruteBot | [] | win.wpbrutebot | [] | 2020-09-23 | | | |
| | | WSCSPL | [] | win.wscspl | ['Dropping Elephant'] | 2022-01-03 | | | |
| | | Wslink | ['FinickyFrogfish'] | win.wslink | [] | 2022-03-30 | | | |
| | | X-Agent | ['splm', 'chopstick'] | win.xagent | ['APT28'] | 2024-07-10 | | | |
| | | XBot POS | [] | win.xbot_pos | [] | 2017-09-14 | | | |
| | | XBTL | [] | win.xbtl | [] | 2016-05-10 | | | |
| | | XDSpy | [] | win.xdspy | [] | 2021-05-03 | | | |
| | | X-Files Stealer | [] | win.xfilesstealer | [] | 2023-12-04 | | | |
| | | XFSADM | [] | win.xfsadm | [] | 2019-07-12 | | | |
| | | XFSCashNCR | [] | win.xfscashncr | [] | 2019-10-04 | | | |
| | | Xiangoop | [] | win.xiangoop | [] | 2024-10-23 | | | |