| | | TYPEFRAME | [] | win.typeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | TypeHash | ['SkinnyD'] | win.typehash | ['Tonto Team'] | 2020-10-08 | | | |
| | | UACMe | ['Akagi'] | win.uacme | [] | 2019-05-17 | | | |
| | | UDPoS | [] | win.udpos | [] | 2019-10-29 | | | |
| | | UFR Stealer | ['Usteal'] | win.ufrstealer | [] | 2019-02-22 | | | |
| | | UnderminerEK | [] | win.underminer_ek | [] | 2022-07-01 | | | |
| | | Unidentified 001 | [] | win.unidentified_001 | [] | 2016-12-29 | | | |
| | | Unidentified 003 | [] | win.unidentified_003 | [] | 2016-12-29 | | | |
| | | Unidentified 006 | [] | win.unidentified_006 | [] | 2016-05-10 | | | |
| | | Unidentified 013 (Korean) | [] | win.unidentified_013_korean_malware | [] | 2017-04-29 | | | |
| | | Unidentified 020 (Vault7) | [] | win.unidentified_020_cia_vault7 | ['Longhorn'] | 2017-05-02 | | | |
| | | Unidentified 023 | [] | win.unidentified_023 | [] | 2017-04-29 | | | |
| | | Unidentified 031 | [] | win.unidentified_031 | [] | 2017-08-22 | | | |
| | | Unidentified 037 | [] | win.unidentified_037 | [] | 2017-11-16 | | | |
| | | Unidentified 039 | [] | win.unidentified_039 | [] | 2017-11-16 | | | |
| | | Unidentified 041 | [] | win.unidentified_041 | [] | 2018-03-16 | | | |
| | | Unidentified 042 | [] | win.unidentified_042 | ['Lazarus Group'] | 2018-03-28 | | | |
| | | Unidentified 044 | [] | win.unidentified_044 | [] | 2018-05-17 | | | |
| | | Unidentified 045 | [] | win.unidentified_045 | [] | 2018-06-13 | | | |
| | | Unidentified 053 (Wonknu?) | [] | win.unidentified_053 | [] | 2018-09-12 | | | |
| | | Unidentified 068 | [] | win.unidentified_068 | ['APT32'] | 2019-12-18 | | | |
| | | Unidentified 069 (Zeus Unnamed2) | [] | win.unidentified_069 | [] | 2020-01-17 | | | |
| | | Unidentified 070 (Downloader) | [] | win.unidentified_070 | [] | 2020-01-20 | | | |
| | | Unidentified 071 (Zeus Unnamed1) | [] | win.unidentified_071 | [] | 2020-02-04 | | | |
| | | Unidentified 074 (Downloader) | [] | win.unidentified_074 | [] | 2024-02-06 | | | |
| | | Unidentified 076 (Higaisa LNK to Shellcode) | [] | win.unidentified_076 | ['Higaisa'] | 2020-11-23 | | | |
| | | Unidentified 077 (Lazarus Downloader) | [] | win.unidentified_077 | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Unidentified 078 (Zebrocy Nim Loader?) | [] | win.unidentified_078 | ['APT28'] | 2020-09-01 | | | |
| | | Unidentified 080 | [] | win.unidentified_080 | ['EMISSARY PANDA'] | 2021-05-12 | | | |
| | | Unidentified 087 | [] | win.unidentified_087 | [] | 2021-11-02 | | | |
| | | Unidentified 088 (Nim Ransomware) | [] | win.unidentified_088 | [] | 2021-12-15 | | | |
| | | Unidentified 091 | [] | win.unidentified_091 | [] | 2022-04-07 | | | |
| | | Unidentified 092 (Confucius Backdoor) | [] | win.unidentified_092 | [] | 2022-07-15 | | | |
| | | Unidentified 095 (Iranian Wiper) | [] | win.unidentified_095 | [] | 2022-09-26 | | | |
| | | Unidentified 096 (Keylogger) | [] | win.unidentified_096 | ['TA410'] | 2022-09-30 | | | |
| | | Unidentified 098 (APT29 Slack Downloader) | [] | win.unidentified_098 | ['APT29'] | 2022-12-20 | | | |
| | | Unidentified 099 (APT29 Dropbox Loader) | [] | win.unidentified_099 | ['APT29'] | 2024-02-02 | | | |
| | | Unidentified 100 (APT-Q-12) | [] | win.unidentified_100 | ['APT-Q-12'] | 2023-12-15 | | | |
| | | Unidentified 104 | [] | win.unidentified_104 | [] | 2023-06-01 | | | |
| | | Unidentified 105 | [] | win.unidentified_105 | ['Silent Chollima'] | 2023-07-24 | | | |
| | | Unidentified 106 | [] | win.unidentified_106 | [] | 2023-10-18 | | | |
| | | Unidentified 107 (APT29) | ['ICEBEAT'] | win.unidentified_107 | [] | 2023-10-18 | | | |
| | | Unidentified 108 | [] | win.unidentified_108 | [] | 2023-07-31 | | | |
| | | Unidentified 109 (Lazarus?) | ['IMEEX'] | win.unidentified_109 | [] | 2024-10-20 | | | |
| | | Unidentified 110 (RustyFlag) | [] | win.unidentified_110 | [] | 2023-09-20 | | | |
| | | Unidentified 112 (Rust-based Stealer) | [] | win.unidentified_112 | [] | 2023-12-27 | | | |
| | | Unidentified 113 (RAT) | [] | win.unidentified_113 | [] | 2024-01-22 | | | |
| | | Unidentified 115 (Nim Loader) | [] | win.unidentified_115 | [] | 2024-03-06 | | | |
| | | Unidentified 116 (Miner) | [] | win.unidentified_116 | [] | 2024-08-29 | | | |
| | | Upatre | [] | win.upatre | [] | 2023-04-18 | | | |
| | | UrlZone | ['Bebloh', 'Shiotob'] | win.urlzone | [] | 2021-05-31 | | | |
| | | Uroburos | ['Snake'] | win.uroburos | ['Turla'] | 2023-08-11 | | | |
| | | USBferry | [] | win.usbferry | ['Pirate Panda'] | 2021-12-17 | | | |
| | | VaporRage | ['BOOMMIC'] | win.vapor_rage | ['APT29'] | 2024-02-02 | | | |
| | | Varenyky | [] | win.varenyky | [] | 2019-12-19 | | | |
| | | Vawtrak | ['Catch', 'grabnew', 'NeverQuest'] | win.vawtrak | ['Lunar Spider'] | 2023-03-20 | | | |
| | | VEILEDSIGNAL | [] | win.veiledsignal | ['Lazarus Group'] | 2023-05-26 | | | |
| | | Velso | [] | win.velso | [] | 2018-02-13 | | | |
| | | Vendetta | [] | win.vendetta | [] | 2023-04-08 | | | |
| | | Vermilion Strike | [] | win.vermilion_strike | [] | 2021-09-14 | | | |
| | | Vflooder | [] | win.vflooder | [] | 2022-11-01 | | | |
| | | VHD Ransomware | [] | win.vhd_ransomware | [] | 2022-06-27 | | | |
| | | VictoryGate | [] | win.victorygate | [] | 2022-02-19 | | | |
| | | VIGILANT CLEANER | ['VIGILANT CHECKER'] | win.vigilant_cleaner | [] | 2021-08-20 | | | |
| | | virdetdoor | [] | win.virdetdoor | [] | 2018-09-13 | | | |
| | | LinseningSvr | [] | win.linseningsvr | [] | 2020-05-27 | | | |
| | | Listrix | [] | win.listrix | ['Energetic Bear'] | 2020-04-21 | | | |
| | | LiteDuke | [] | win.liteduke | ['APT29'] | 2020-05-18 | | | |
| | | LOBSHOT | [] | win.lobshot | [] | 2023-07-21 | | | |
| | | LockerGoga | [] | win.lockergoga | ['FIN6'] | 2024-03-13 | | | |
| | | LockFile | [] | win.lockfile | [] | 2022-09-20 | | | |
| | | Locky (Decryptor) | [] | win.locky_decryptor | [] | 2016-04-19 | | | |
| | | LockPOS | [] | win.lock_pos | [] | 2018-02-26 | | | |
| | | LogPOS | [] | win.logpos | [] | 2022-09-19 | | | |
| | | Logtu | [] | win.logtu | [] | 2022-08-11 | | | |
| | | LOLSnif | [] | win.lolsnif | [] | 2021-03-16 | | | |
| | | LONGWATCH | [] | win.longwatch | ['APT34'] | 2021-06-29 | | | |
| | | Lookback | [] | win.lookback | ['TA410'] | 2022-09-30 | | | |
| | | Lorenz | [] | win.lorenz | [] | 2023-02-27 | | | |
| | | Loup | [] | win.loup | [] | 2020-08-25 | | | |
| | | LOWBALL | [] | win.lowball | ['Temper Panda'] | 2021-07-20 | | | |
| | | LOWKEY | ['PortReuse'] | win.lowkey | ['APT41'] | 2022-03-10 | | | |
| | | LOWZERO | [] | win.lowzero | ['Lucky Cat'] | 2023-02-09 | | | |
| | | LPEClient | ['LPEClientTea'] | win.lpeclient | ['Lazarus Group'] | 2023-11-27 | | | |
| | | Luca Stealer | [] | win.luca_stealer | [] | 2022-12-15 | | | |
| | | Lumar | ['PovertyStealer'] | win.lumar | [] | 2024-10-21 | | | |
| | | LunchMoney | [] | win.lunchmoney | ['Leviathan'] | 2019-03-10 | | | |
| | | Lurk | [] | win.lurk | [] | 2016-05-10 | | | |
| | | m0yv | [] | win.m0yv | [] | 2023-04-02 | | | |
| | | MadMax | [] | win.madmax | [] | 2016-12-28 | | | |
| | | Magala | [] | win.magala | [] | 2017-08-01 | | | |
| | | Maggie | [] | win.maggie | [] | 2022-10-30 | | | |
| | | MagicRAT | [] | win.magic_rat | ['Lazarus Group', 'Silent Chollima'] | 2023-10-17 | | | |
| | | Magniber | [] | win.magniber | [] | 2024-01-31 | | | |
| | | Mail-O | [] | win.mail_o | [] | 2022-07-29 | | | |
| | | Makadocs | [] | win.makadocs | ['Poseidon Group'] | 2021-07-20 | | | |
| | | MakLoader | [] | win.makloader | [] | 2018-10-03 | | | |
| | | Makop | [] | win.makop | [] | 2023-08-14 | | | |
| | | Maktub | [] | win.maktub | [] | 2023-05-26 | | | |
| | | MalumPOS | [] | win.malumpos | [] | 2018-04-23 | | | |