| | | Turla SilentMoon | ['BigBoss', 'Cacao', 'GoldenSky', 'HyperStack'] | win.turla_silentmoon | ['Turla'] | 2022-12-01 | | | |
| | | TURNEDUP | ['Notestuk'] | win.turnedup | ['APT33'] | 2020-08-21 | | | |
| | | TYPEFRAME | [] | win.typeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | TypeHash | ['SkinnyD'] | win.typehash | ['Tonto Team'] | 2020-10-08 | | | |
| | | UACMe | ['Akagi'] | win.uacme | [] | 2019-05-17 | | | |
| | | UDPoS | [] | win.udpos | [] | 2019-10-29 | | | |
| | | UFR Stealer | ['Usteal'] | win.ufrstealer | [] | 2019-02-22 | | | |
| | | UnderminerEK | [] | win.underminer_ek | [] | 2022-07-01 | | | |
| | | Unidentified 001 | [] | win.unidentified_001 | [] | 2016-12-29 | | | |
| | | Unidentified 003 | [] | win.unidentified_003 | [] | 2016-12-29 | | | |
| | | Unidentified 006 | [] | win.unidentified_006 | [] | 2016-05-10 | | | |
| | | Unidentified 013 (Korean) | [] | win.unidentified_013_korean_malware | [] | 2017-04-29 | | | |
| | | Unidentified 020 (Vault7) | [] | win.unidentified_020_cia_vault7 | ['Longhorn'] | 2017-05-02 | | | |
| | | Unidentified 023 | [] | win.unidentified_023 | [] | 2017-04-29 | | | |
| | | Unidentified 031 | [] | win.unidentified_031 | [] | 2017-08-22 | | | |
| | | Unidentified 037 | [] | win.unidentified_037 | [] | 2017-11-16 | | | |
| | | Unidentified 039 | [] | win.unidentified_039 | [] | 2017-11-16 | | | |
| | | Unidentified 041 | [] | win.unidentified_041 | [] | 2018-03-16 | | | |
| | | Unidentified 042 | [] | win.unidentified_042 | ['Lazarus Group'] | 2018-03-28 | | | |
| | | Unidentified 044 | [] | win.unidentified_044 | [] | 2018-05-17 | | | |
| | | Unidentified 045 | [] | win.unidentified_045 | [] | 2018-06-13 | | | |
| | | Unidentified 053 (Wonknu?) | [] | win.unidentified_053 | [] | 2018-09-12 | | | |
| | | Unidentified 068 | [] | win.unidentified_068 | ['APT32'] | 2019-12-18 | | | |
| | | Unidentified 069 (Zeus Unnamed2) | [] | win.unidentified_069 | [] | 2020-01-17 | | | |
| | | Unidentified 070 (Downloader) | [] | win.unidentified_070 | [] | 2020-01-20 | | | |
| | | Unidentified 071 (Zeus Unnamed1) | [] | win.unidentified_071 | [] | 2020-02-04 | | | |
| | | Unidentified 074 (Downloader) | [] | win.unidentified_074 | [] | 2024-02-06 | | | |
| | | Unidentified 076 (Higaisa LNK to Shellcode) | [] | win.unidentified_076 | ['Higaisa'] | 2020-11-23 | | | |
| | | Unidentified 077 (Lazarus Downloader) | [] | win.unidentified_077 | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Unidentified 078 (Zebrocy Nim Loader?) | [] | win.unidentified_078 | ['APT28'] | 2020-09-01 | | | |
| | | Unidentified 080 | [] | win.unidentified_080 | ['EMISSARY PANDA'] | 2021-05-12 | | | |
| | | Unidentified 087 | [] | win.unidentified_087 | [] | 2021-11-02 | | | |
| | | Unidentified 088 (Nim Ransomware) | [] | win.unidentified_088 | [] | 2021-12-15 | | | |
| | | Unidentified 091 | [] | win.unidentified_091 | [] | 2022-04-07 | | | |
| | | Unidentified 092 (Confucius Backdoor) | [] | win.unidentified_092 | [] | 2022-07-15 | | | |
| | | Unidentified 095 (Iranian Wiper) | [] | win.unidentified_095 | [] | 2022-09-26 | | | |
| | | Unidentified 096 (Keylogger) | [] | win.unidentified_096 | ['TA410'] | 2025-10-15 | | | |
| | | Unidentified 098 (APT29 Slack Downloader) | [] | win.unidentified_098 | ['APT29'] | 2022-12-20 | | | |
| | | Unidentified 099 (APT29 Dropbox Loader) | [] | win.unidentified_099 | ['APT29'] | 2024-02-02 | | | |
| | | Unidentified 100 (APT-Q-12) | [] | win.unidentified_100 | ['APT-Q-12'] | 2023-12-15 | | | |
| | | Unidentified 103 (FIN8) | ['Ragnar Loader', 'Sardonic'] | win.unidentified_103 | [] | 2025-03-06 | | | |
| | | Unidentified 104 | [] | win.unidentified_104 | [] | 2023-06-01 | | | |
| | | Unidentified 105 | [] | win.unidentified_105 | ['Silent Chollima'] | 2023-07-24 | | | |
| | | Unidentified 106 | [] | win.unidentified_106 | [] | 2023-10-18 | | | |
| | | Unidentified 107 (APT29) | ['ICEBEAT'] | win.unidentified_107 | [] | 2023-10-18 | | | |
| | | Unidentified 108 | [] | win.unidentified_108 | [] | 2023-07-31 | | | |
| | | Unidentified 109 (Lazarus?) | ['IMEEX'] | win.unidentified_109 | [] | 2024-10-20 | | | |
| | | Unidentified 110 (RustyFlag) | [] | win.unidentified_110 | [] | 2023-09-20 | | | |
| | | Unidentified 112 (Rust-based Stealer) | [] | win.unidentified_112 | [] | 2023-12-27 | | | |
| | | Unidentified 113 (RAT) | [] | win.unidentified_113 | [] | 2024-01-22 | | | |
| | | Unidentified 115 (Nim Loader) | [] | win.unidentified_115 | [] | 2024-03-06 | | | |
| | | Unidentified 116 (Miner) | [] | win.unidentified_116 | [] | 2024-08-29 | | | |
| | | Unidentified 118 | [] | win.unidentified_118 | [] | 2025-03-05 | | | |
| | | Unidentified 121 | [] | win.unidentified_121 | [] | 2025-04-28 | | | |
| | | UPAS | ['Rombrast'] | win.upas | [] | 2025-07-24 | | | |
| | | Upatre | [] | win.upatre | [] | 2023-04-18 | | | |
| | | Urausy | [] | win.urausy | [] | 2025-07-24 | | | |
| | | UrlZone | ['Bebloh', 'Shiotob'] | win.urlzone | [] | 2021-05-31 | | | |
| | | USBferry | [] | win.usbferry | ['Pirate Panda'] | 2021-12-17 | | | |
| | | Valkyrie Stealer | [] | win.valkyrie_stealer | [] | 2025-12-15 | | | |
| | | VanHelsing | [] | win.vanhelsing | [] | 2025-05-20 | | | |
| | | VaporRage | ['BOOMMIC'] | win.vapor_rage | ['APT29'] | 2024-02-02 | | | |
| | | Varenyky | [] | win.varenyky | [] | 2019-12-19 | | | |
| | | Vawtrak | ['Catch', 'grabnew', 'NeverQuest'] | win.vawtrak | ['Lunar Spider'] | 2023-03-20 | | | |
| | | VEILEDSIGNAL | [] | win.veiledsignal | ['Lazarus Group'] | 2023-05-26 | | | |
| | | VELETRIX | [] | win.veletrix | [] | 2025-08-19 | | | |
| | | Velso | [] | win.velso | [] | 2018-02-13 | | | |
| | | Vendetta | [] | win.vendetta | [] | 2023-04-08 | | | |
| | | VenomLoader | [] | win.venomloader | [] | 2024-12-06 | | | |
| | | Vermilion Strike | [] | win.vermilion_strike | [] | 2021-09-14 | | | |
| | | Vflooder | [] | win.vflooder | [] | 2022-11-01 | | | |
| | | VHD Ransomware | [] | win.vhd_ransomware | [] | 2022-06-27 | | | |
| | | VictoryGate | [] | win.victorygate | [] | 2022-02-19 | | | |
| | | VIGILANT CLEANER | ['VIGILANT CHECKER'] | win.vigilant_cleaner | [] | 2021-08-20 | | | |
| | | virdetdoor | [] | win.virdetdoor | [] | 2018-09-13 | | | |
| | | VirLock | [] | win.virlock | [] | 2024-11-25 | | | |
| | | VIRTUALGATE | [] | win.virtualgate | [] | 2022-10-05 | | | |
| | | Virut | [] | win.virut | [] | 2025-05-02 | | | |
| | | VM Zeus | ['VMzeus', 'ZeusVM', 'Zberp'] | win.vmzeus | [] | 2018-05-22 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2020-11-09 | | | |
| | | Ahtapot | [] | win.ahtapot | [] | 2021-10-24 | | | |
| | | AkdoorTea | [] | win.akdoortea | ['WageMole'] | 2025-10-20 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2025-10-01 | | | |
| | | Albaniiutas | ['BlueTraveller'] | win.albaniiutas | ['TA428'] | 2024-10-15 | | | |
| | | Project Alice | ['PrAlice', 'AliceATM'] | win.alice_atm | [] | 2020-02-27 | | | |
| | | Alina POS | ['alina_spark', 'katrina', 'alina_eagle'] | win.alina_pos | [] | 2020-07-06 | | | |
| | | Allaple | ['Starman'] | win.allaple | [] | 2018-02-10 | | | |
| | | Alma Communicator | [] | win.alma_communicator | ['OilRig'] | 2019-04-18 | | | |
| | | AlmaLocker | [] | win.alma_locker | [] | 2016-12-26 | | | |
| | | ALPC Local PrivEsc | [] | win.alpc_lpe | [] | 2018-09-07 | | | |
| | | AlphaNC | [] | win.alphanc | ['Lazarus Group'] | 2020-05-23 | | | |
| | | Alreay | [] | win.alreay | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Alureon | ['Olmarik', 'Pihar', 'TDL', 'TDSS', 'wowlik'] | win.alureon | [] | 2024-04-23 | | | |
| | | Amadey | [] | win.amadey | [] | 2025-12-08 | | | |
| | | AMTsol | ['Adupihan'] | win.amtsol | ['PLATINUM'] | 2017-06-13 | | | |
| | | Anatova Ransomware | [] | win.anatova_ransom | [] | 2019-05-09 | | | |
| | | Anchor | [] | win.anchor | ['WIZARD SPIDER'] | 2025-09-09 | | | |
| | | AnchorMTea | [] | win.anchormtea | ['Lazarus Group'] | 2025-09-09 | | | |
| | | Andardoor | ['ROCKHATCH'] | win.andardoor | ['Silent Chollima'] | 2023-10-11 | | | |
| | | Andromeda | ['Gamarue', 'B106-Gamarue', 'B67-SS-Gamarue', 'b66'] | win.andromeda | ['Operation C-Major'] | 2025-07-24 | | | |