| | | Mewsei | [] | win.mewsei | [] | 2016-04-19 | | | |
| | | MgBot | ['BLame', 'MgmBot', 'POCOSTICK'] | win.mgbot | [] | 2024-10-29 | | | |
| | | Miancha | [] | win.miancha | [] | 2017-05-21 | | | |
| | | Micrass | [] | win.micrass | [] | 2018-04-13 | | | |
| | | MicroBackdoor | [] | win.microbackdoor | ['Ghostwriter'] | 2022-08-05 | | | |
| | | Microcin | [] | win.microcin | [] | 2022-08-26 | | | |
| | | Mikoponi | [] | win.mikoponi | [] | 2019-10-13 | | | |
| | | MILKMAID | [] | win.milkmaid | ['APT 30'] | 2018-04-26 | | | |
| | | Milum | [] | win.milum | [] | 2021-07-09 | | | |
| | | mim221 | [] | win.mim221 | ['Operation Soft Cell'] | 2023-03-27 | | | |
| | | Mindware | [] | win.mindware | [] | 2022-06-09 | | | |
| | | MiniASP | [] | win.miniasp | ['Comment Crew'] | 2018-02-10 | | | |
| | | MINIBIKE | [] | win.minibike | [] | 2024-04-29 | | | |
| | | miniBlindingCan | ['AIRDRY.V2', 'EventHorizon'] | win.miniblindingcan | ['Lazarus Group'] | 2023-12-19 | | | |
| | | MINIBUS | [] | win.minibus | [] | 2024-04-29 | | | |
| | | miniTypeFrame | [] | win.minitypeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Mirage | [] | win.mirage | ['Mirage'] | 2020-10-02 | | | |
| | | MirageFox | [] | win.miragefox | ['Mirage'] | 2018-06-19 | | | |
| | | Mirai | [] | win.mirai | [] | 2022-09-16 | | | |
| | | MirrorKey | [] | win.mirrorkey | [] | 2023-02-17 | | | |
| | | Misfox | ['Dromedan', 'MixFox', 'ModPack'] | win.misfox | [] | 2024-06-05 | | | |
| | | Misha | [] | win.misha | [] | 2022-11-28 | | | |
| | | MISTCLOAK | ['HIUPAN'] | win.mistcloak | [] | 2023-09-08 | | | |
| | | T34loader | [] | win.t34loader | [] | 2024-02-02 | | | |
| | | TabMsgSQL | [] | win.tabmsgsql | ['Comment Crew'] | 2018-02-13 | | | |
| | | taidoor | ['simbot'] | win.taidoor | [] | 2022-03-07 | | | |
| | | TAINTEDSCRIBE | [] | win.taintedscribe | [] | 2020-06-23 | | | |
| | | Taleret | [] | win.taleret | [] | 2018-02-10 | | | |
| | | Tandfuy | [] | win.tandfuy | [] | 2018-07-24 | | | |
| | | Tapaoux | [] | win.tapaoux | ['DarkHotel'] | 2018-05-03 | | | |
| | | Tarsip | [] | win.tarsip | ['Comment Crew'] | 2018-02-10 | | | |
| | | Taurus Stealer | [] | win.taurus_stealer | [] | 2023-08-07 | | | |
| | | TClient | ['FIRESHADOW'] | win.tclient | ['Pirate Panda'] | 2020-06-05 | | | |
| | | TelB | [] | win.telb | [] | 2020-09-21 | | | |
| | | TeleBot | [] | win.telebot | ['TeleBots', 'Sandworm'] | 2022-08-25 | | | |
| | | Teleport | [] | win.teleport | ['TA505'] | 2022-12-12 | | | |
| | | TellYouThePass | [] | win.tellyouthepass | [] | 2023-06-09 | | | |
| | | Tempedreve | [] | win.tempedreve | [] | 2016-04-20 | | | |
| | | TempStealer | [] | win.temp_stealer | [] | 2022-11-21 | | | |
| | | Terminator RAT | ['Fakem RAT'] | win.terminator_rat | [] | 2018-01-21 | | | |
| | | Termite | [] | win.termite | [] | 2022-06-27 | | | |
| | | TeslaCrypt | ['cryptesla'] | win.teslacrypt | [] | 2023-06-09 | | | |
| | | TFlower | [] | win.tflower | [] | 2021-03-04 | | | |
| | | Thanatos | ['Alphabot'] | win.thanatos | [] | 2017-01-05 | | | |
| | | Thanatos Ransomware | [] | win.thanatos_ransom | [] | 2018-07-05 | | | |
| | | ThreeByte | [] | win.threebyte | ['IXESHE'] | 2017-05-21 | | | |
| | | ThumbThief | [] | win.thumbthief | [] | | | | |
| | | ThunderX | ['Ranzy Locker'] | win.thunderx | [] | 2022-01-24 | | | |
| | | Thunker | [] | win.thunker | [] | 2018-07-24 | | | |
| | | Tidepool | [] | win.tidepool | ['Mirage'] | 2023-01-25 | | | |
| | | TigerLite | [] | win.tigerlite | ['Silent Chollima'] | 2024-08-15 | | | |
| | | Tiger RAT | [] | win.tiger_rat | ['Silent Chollima'] | 2024-08-15 | | | |
| | | tildeb | [] | win.tildeb | ['Equation Group'] | 2021-09-19 | | | |
| | | Tinba | ['Zusy', 'TinyBanker', 'Illi'] | win.tinba | [] | 2022-06-09 | | | |
| | | TinyFluff | [] | win.tinyfluff | [] | 2023-07-12 | | | |
| | | TinyLoader | [] | win.tinyloader | ['Tiny Spider'] | 2020-07-24 | | | |
| | | TinyMet | ['TiniMet'] | win.tinymet | ['Anunak', 'TA505'] | 2023-08-03 | | | |
| | | TinyNuke | ['NukeBot', 'Nuclear Bot', 'MicroBankingTrojan', 'Xbot'] | win.tinynuke | [] | 2022-08-28 | | | |
| | | TinyTurlaNG | ['TTNG'] | win.tinyturla_ng | ['Turla'] | 2024-10-21 | | | |
| | | TinyTyphon | [] | win.tinytyphon | ['Dropping Elephant'] | 2020-04-06 | | | |
| | | Tiop | [] | win.tiop | [] | 2018-07-24 | | | |
| | | Tmanger | ['LuckyBack'] | win.tmanger | ['TA428'] | 2024-10-15 | | | |
| | | Tofsee | ['Gheg'] | win.tofsee | [] | 2023-10-17 | | | |
| | | TokyoX | [] | win.tokyox | [] | 2022-01-18 | | | |
| | | TONEDEAF | [] | win.tonedeaf | ['APT34'] | 2021-04-10 | | | |
| | | TONERJAM | [] | win.tonerjam | [] | 2024-10-29 | | | |
| | | TorrentLocker | ['Teerac'] | win.torrentlocker | [] | 2021-09-19 | | | |
| | | TorLoader | [] | win.tor_loader | [] | 2023-07-11 | | | |
| | | TOUCHMOVE | [] | win.touchmove | ['Lazarus Group'] | 2023-11-27 | | | |
| | | TransBox | [] | win.transbox | [] | 2023-02-17 | | | |
| | | TreasureHunter | ['huntpos'] | win.treasurehunter | [] | 2018-05-14 | | | |
| | | Trochilus RAT | [] | win.trochilus_rat | ['APT31', 'GALLIUM', 'Stone Panda'] | 2022-09-20 | | | |
| | | Troldesh | ['Shade'] | win.troldesh | [] | 2023-05-02 | | | |
| | | Troll Stealer | [] | win.troll_stealer | ['Kimsuky'] | 2024-02-09 | | | |
| | | Tuoni | [] | win.tuoni | [] | 2024-05-14 | | | |
| | | turian | [] | win.turian | [] | 2023-06-09 | | | |
| | | TurlaRPC | [] | win.turla_rpc | ['Turla'] | 2022-12-01 | | | |
| | | Turla SilentMoon | ['BigBoss', 'Cacao', 'GoldenSky', 'HyperStack'] | win.turla_silentmoon | ['Turla'] | 2022-12-01 | | | |
| | | TURNEDUP | ['Notestuk'] | win.turnedup | ['APT33'] | 2020-08-21 | | | |
| | | TYPEFRAME | [] | win.typeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | TypeHash | ['SkinnyD'] | win.typehash | ['Tonto Team'] | 2020-10-08 | | | |
| | | UACMe | ['Akagi'] | win.uacme | [] | 2019-05-17 | | | |
| | | UDPoS | [] | win.udpos | [] | 2019-10-29 | | | |
| | | UFR Stealer | ['Usteal'] | win.ufrstealer | [] | 2019-02-22 | | | |
| | | UnderminerEK | [] | win.underminer_ek | [] | 2022-07-01 | | | |
| | | Unidentified 001 | [] | win.unidentified_001 | [] | 2016-12-29 | | | |
| | | Unidentified 003 | [] | win.unidentified_003 | [] | 2016-12-29 | | | |
| | | Unidentified 006 | [] | win.unidentified_006 | [] | 2016-05-10 | | | |
| | | Unidentified 013 (Korean) | [] | win.unidentified_013_korean_malware | [] | 2017-04-29 | | | |
| | | Unidentified 020 (Vault7) | [] | win.unidentified_020_cia_vault7 | ['Longhorn'] | 2017-05-02 | | | |
| | | Unidentified 023 | [] | win.unidentified_023 | [] | 2017-04-29 | | | |
| | | Unidentified 031 | [] | win.unidentified_031 | [] | 2017-08-22 | | | |
| | | Unidentified 037 | [] | win.unidentified_037 | [] | 2017-11-16 | | | |
| | | Unidentified 039 | [] | win.unidentified_039 | [] | 2017-11-16 | | | |
| | | Unidentified 041 | [] | win.unidentified_041 | [] | 2018-03-16 | | | |
| | | Unidentified 042 | [] | win.unidentified_042 | ['Lazarus Group'] | 2018-03-28 | | | |
| | | Unidentified 044 | [] | win.unidentified_044 | [] | 2018-05-17 | | | |
| | | Unidentified 045 | [] | win.unidentified_045 | [] | 2018-06-13 | | | |
| | | Unidentified 053 (Wonknu?) | [] | win.unidentified_053 | [] | 2018-09-12 | | | |
| | | Unidentified 068 | [] | win.unidentified_068 | ['APT32'] | 2019-12-18 | | | |