| | | Unidentified 074 (Downloader) | [] | win.unidentified_074 | [] | 2024-02-06 | | | |
| | | Unidentified 076 (Higaisa LNK to Shellcode) | [] | win.unidentified_076 | ['Higaisa'] | 2020-11-23 | | | |
| | | Unidentified 077 (Lazarus Downloader) | [] | win.unidentified_077 | ['Lazarus Group'] | 2023-08-21 | | | |
| | | Unidentified 078 (Zebrocy Nim Loader?) | [] | win.unidentified_078 | ['APT28'] | 2020-09-01 | | | |
| | | Unidentified 080 | [] | win.unidentified_080 | ['EMISSARY PANDA'] | 2021-05-12 | | | |
| | | Unidentified 087 | [] | win.unidentified_087 | [] | 2021-11-02 | | | |
| | | Unidentified 088 (Nim Ransomware) | [] | win.unidentified_088 | [] | 2021-12-15 | | | |
| | | Unidentified 091 | [] | win.unidentified_091 | [] | 2022-04-07 | | | |
| | | Unidentified 092 (Confucius Backdoor) | [] | win.unidentified_092 | [] | 2022-07-15 | | | |
| | | Unidentified 095 (Iranian Wiper) | [] | win.unidentified_095 | [] | 2022-09-26 | | | |
| | | Unidentified 096 (Keylogger) | [] | win.unidentified_096 | ['TA410'] | 2025-10-15 | | | |
| | | Unidentified 098 (APT29 Slack Downloader) | [] | win.unidentified_098 | ['APT29'] | 2022-12-20 | | | |
| | | Unidentified 099 (APT29 Dropbox Loader) | [] | win.unidentified_099 | ['APT29'] | 2024-02-02 | | | |
| | | Unidentified 100 (APT-Q-12) | [] | win.unidentified_100 | ['APT-Q-12'] | 2023-12-15 | | | |
| | | Unidentified 103 (FIN8) | ['Ragnar Loader', 'Sardonic'] | win.unidentified_103 | [] | 2025-03-06 | | | |
| | | Unidentified 104 | [] | win.unidentified_104 | [] | 2023-06-01 | | | |
| | | Unidentified 105 | [] | win.unidentified_105 | ['Silent Chollima'] | 2023-07-24 | | | |
| | | Unidentified 106 | [] | win.unidentified_106 | [] | 2023-10-18 | | | |
| | | Unidentified 107 (APT29) | ['ICEBEAT'] | win.unidentified_107 | [] | 2023-10-18 | | | |
| | | Unidentified 108 | [] | win.unidentified_108 | [] | 2023-07-31 | | | |
| | | Unidentified 109 (Lazarus?) | ['IMEEX'] | win.unidentified_109 | [] | 2024-10-20 | | | |
| | | Unidentified 110 (RustyFlag) | [] | win.unidentified_110 | [] | 2023-09-20 | | | |
| | | Unidentified 112 (Rust-based Stealer) | [] | win.unidentified_112 | [] | 2023-12-27 | | | |
| | | Unidentified 113 (RAT) | [] | win.unidentified_113 | [] | 2024-01-22 | | | |
| | | Unidentified 115 (Nim Loader) | [] | win.unidentified_115 | [] | 2024-03-06 | | | |
| | | Unidentified 116 (Miner) | [] | win.unidentified_116 | [] | 2024-08-29 | | | |
| | | Unidentified 118 | [] | win.unidentified_118 | [] | 2025-03-05 | | | |
| | | Unidentified 121 | [] | win.unidentified_121 | [] | 2025-04-28 | | | |
| | | Unidentified 124 (Azure Functions) | [] | win.unidentified_124 | [] | 2026-01-05 | | | |
| | | UPAS | ['Rombrast'] | win.upas | [] | 2025-07-24 | | | |
| | | Upatre | [] | win.upatre | [] | 2023-04-18 | | | |
| | | Urausy | [] | win.urausy | [] | 2025-07-24 | | | |
| | | USBferry | [] | win.usbferry | ['Pirate Panda'] | 2021-12-17 | | | |
| | | Valkyrie Stealer | [] | win.valkyrie_stealer | [] | 2025-12-15 | | | |
| | | VanHelsing | [] | win.vanhelsing | [] | 2025-05-20 | | | |
| | | VaporRage | ['BOOMMIC'] | win.vapor_rage | ['APT29'] | 2024-02-02 | | | |
| | | Varenyky | [] | win.varenyky | [] | 2019-12-19 | | | |
| | | Vawtrak | ['Catch', 'grabnew', 'NeverQuest'] | win.vawtrak | ['Lunar Spider'] | 2023-03-20 | | | |
| | | VEILEDSIGNAL | [] | win.veiledsignal | ['Lazarus Group'] | 2023-05-26 | | | |
| | | VELETRIX | [] | win.veletrix | [] | 2025-08-19 | | | |
| | | Velso | [] | win.velso | [] | 2018-02-13 | | | |
| | | Vendetta | [] | win.vendetta | [] | 2023-04-08 | | | |
| | | VenomLoader | [] | win.venomloader | [] | 2024-12-06 | | | |
| | | VENON | [] | win.venon | [] | 2026-03-23 | | | |
| | | Vermilion Strike | [] | win.vermilion_strike | [] | 2021-09-14 | | | |
| | | Vflooder | [] | win.vflooder | [] | 2022-11-01 | | | |
| | | VHD Ransomware | [] | win.vhd_ransomware | [] | 2022-06-27 | | | |
| | | VictoryGate | [] | win.victorygate | [] | 2022-02-19 | | | |
| | | VIGILANT CLEANER | ['VIGILANT CHECKER'] | win.vigilant_cleaner | [] | 2021-08-20 | | | |
| | | virdetdoor | [] | win.virdetdoor | [] | 2018-09-13 | | | |
| | | VirLock | [] | win.virlock | [] | 2024-11-25 | | | |
| | | VIRTUALGATE | [] | win.virtualgate | [] | 2022-10-05 | | | |
| | | Virut | [] | win.virut | [] | 2025-05-02 | | | |
| | | VM Zeus | ['VMzeus', 'ZeusVM', 'Zberp'] | win.vmzeus | [] | 2018-05-22 | | | |
| | | Vobfus | ['Beebone'] | win.vobfus | [] | 2022-11-12 | | | |
| | | Vohuk | [] | win.vohuk | [] | 2022-12-19 | | | |
| | | Void | ['VoidCrypt'] | win.void | [] | 2026-02-25 | | | |
| | | Voidoor | [] | win.voidoor | [] | 2023-07-19 | | | |
| | | Voldemort | [] | win.voldemort | [] | 2025-07-17 | | | |
| | | Volgmer | ['FALLCHILL', 'Manuscrypt'] | win.volgmer | ['Lazarus Group'] | 2025-07-29 | | | |
| | | REvil | ['Sodinokibi', 'Sodin'] | win.revil | ['Pinchy Spider'] | 2024-06-12 | | | |
| | | RGDoor | [] | win.rgdoor | [] | 2021-08-09 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2026-03-12 | | | |
| | | Rhino | [] | win.rhino | [] | 2020-05-18 | | | |
| | | RHttpCtrl | [] | win.rhttpctrl | ['APT 30'] | 2020-06-20 | | | |
| | | Rhysida | [] | win.rhysida | ['Vanilla Tempest'] | 2025-09-09 | | | |
| | | Rifdoor | [] | win.rifdoor | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | Rikamanu | [] | win.rikamanu | ['Thrip'] | 2018-06-25 | | | |
| | | Rincux | [] | win.rincux | [] | 2018-10-26 | | | |
| | | Ripper ATM | [] | win.ripper_atm | [] | 2020-02-27 | | | |
| | | RisePro | [] | win.risepro | [] | 2024-12-11 | | | |
| | | Rising Sun | [] | win.rising_sun | ['Operation Sharpshooter'] | 2022-05-05 | | | |
| | | RM3 | [] | win.rm3 | [] | 2022-12-29 | | | |
| | | ROADSWEEP | [] | win.roadsweep | [] | 2024-10-18 | | | |
| | | Rockloader | [] | win.rockloader | [] | 2022-02-14 | | | |
| | | Rofin | [] | win.rofin | [] | 2016-04-20 | | | |
| | | Rokku | [] | win.rokku | [] | 2020-12-20 | | | |
| | | RollSling | [] | win.roll_sling | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Rombertik | ['CarbonGrabber'] | win.rombertik | [] | 2017-05-21 | | | |
| | | ROMCOM RAT | ['PEAPOD', 'SingleCamper', 'SnipBot'] | win.romcom_rat | [] | 2026-03-12 | | | |
| | | Romeo(Alfa,Bravo, ...) | [] | win.romeos | ['Lazarus Group'] | 2017-05-17 | | | |
| | | Roopirs | [] | win.roopirs | [] | 2018-07-24 | | | |
| | | Roopy | [] | win.roopy | [] | 2023-04-26 | | | |
| | | Rorschach Ransomware | ['BabLock'] | win.rorschach | [] | 2026-02-25 | | | |
| | | Roseam | ['PisLoader'] | win.roseam | ['Wekby'] | 2024-11-29 | | | |
| | | Rover | [] | win.rover | [] | 2020-11-04 | | | |
| | | Rovnix | ['Mayachok', 'Cidox', 'BkLoader'] | win.rovnix | [] | 2022-05-25 | | | |
| | | RoyalCli | [] | win.royalcli | ['Mirage'] | 2021-04-29 | | | |
| | | Royal DNS | [] | win.royal_dns | ['Mirage'] | 2021-04-29 | | | |
| | | Royal Ransom | [] | win.royal_ransom | [] | 2026-01-12 | | | |
| | | RTM Locker | ['Read The Manual Locker'] | win.rtm_locker | [] | 2023-11-13 | | | |
| | | rtpos | [] | win.rtpos | [] | 2022-02-01 | | | |
| | | Ruckguv | [] | win.ruckguv | [] | 2018-03-01 | | | |
| | | Rugmi | ['Penguish'] | win.rugmi | [] | 2025-04-09 | | | |
| | | Rumish | [] | win.rumish | [] | 2018-07-24 | | | |
| | | Running RAT | ['running_rat'] | win.runningrat | [] | 2024-11-15 | | | |
| | | Rustock | [] | win.rustock | [] | 2022-02-14 | | | |
| | | Rustonotto | ['CHILLYCHINO'] | win.rustonotto | ['APT37'] | 2025-09-09 | | | |
| | | RustyRocket | [] | win.rustyrocket | [] | 2026-03-10 | | | |
| | | RustyClaw | [] | win.rusty_claw | ['RomCom'] | 2025-11-25 | | | |