| | | Knot | [] | win.knot | [] | 2021-01-04 | | | |
| | | Koadic | [] | win.koadic | ['APT28', 'Stone Panda'] | 2024-01-31 | | | |
| | | KOMPROGO | ['Splinter RAT'] | win.komprogo | ['APT32'] | 2019-06-17 | | | |
| | | KoobFace | [] | win.koobface | [] | 2022-01-28 | | | |
| | | Korlia | ['Bisonal'] | win.korlia | ['Tonto Team'] | 2023-09-20 | | | |
| | | KPOT Stealer | ['Khalesi', 'Kpot'] | win.kpot_stealer | [] | 2023-07-24 | | | |
| | | KrBanker | ['BlackMoon'] | win.krbanker | [] | 2024-04-23 | | | |
| | | KrDownloader | [] | win.krdownloader | [] | 2017-05-12 | | | |
| | | Kronos | ['Osiris'] | win.kronos | [] | 2023-05-21 | | | |
| | | KSL0T | [] | win.ksl0t | ['Turla'] | 2019-07-31 | | | |
| | | Kuaibu | ['Barys', 'Gofot', 'Kuaibpy'] | win.kuaibu8 | [] | 2017-03-29 | | | |
| | | Kuluoz | [] | win.kuluoz | [] | 2017-11-23 | | | |
| | | Kurton | [] | win.kurton | ['Comment Crew'] | 2018-02-13 | | | |
| | | Kutaki | [] | win.kutaki | [] | 2024-05-21 | | | |
| | | Kwampirs | [] | win.kwampirs | ['Orangeworm'] | 2022-03-15 | | | |
| | | Lambert | ['Plexor'] | win.lambert | ['Longhorn'] | 2022-05-04 | | | |
| | | LatentBot | [] | win.latentbot | [] | 2022-06-09 | | | |
| | | Laturo Stealer | [] | win.laturo | [] | 2019-10-31 | | | |
| | | LazarDoor | [] | win.lazardoor | ['Lazarus Group'] | 2023-12-27 | | | |
| | | LazarLoader | [] | win.lazarloader | ['Lazarus Group'] | 2023-06-29 | | | |
| | | KillDisk (Lazarus) | ['KillDisk.NBO'] | win.lazarus_killdisk | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Laziok | [] | win.laziok | [] | 2022-03-01 | | | |
| | | LCPDot | [] | win.lcpdot | ['Lazarus Group'] | 2023-08-03 | | | |
| | | LDR4 | [] | win.ldr4 | [] | 2023-01-13 | | | |
| | | Leash | [] | win.leash | ['Magic Hound'] | 2017-12-15 | | | |
| | | Lechiket | [] | win.lechiket | [] | 2024-04-29 | | | |
| | | Lemon Duck | [] | win.lemonduck | [] | 2022-04-24 | | | |
| | | Leouncia | ['shoco'] | win.leouncia | ['APT5'] | 2021-11-02 | | | |
| | | LIGHTBUNNY | [] | win.lightbunny | [] | 2023-04-25 | | | |
| | | LIGHTRAIL | [] | win.lightrail | [] | 2024-04-29 | | | |
| | | LIGHTWORK | [] | win.lightwork | [] | 2023-05-26 | | | |
| | | LinseningSvr | [] | win.linseningsvr | [] | 2020-05-27 | | | |
| | | Listrix | [] | win.listrix | ['Energetic Bear'] | 2020-04-21 | | | |
| | | LiteDuke | [] | win.liteduke | ['APT29'] | 2020-05-18 | | | |
| | | LOBSHOT | [] | win.lobshot | [] | 2023-07-21 | | | |
| | | LockerGoga | [] | win.lockergoga | ['FIN6'] | 2024-03-13 | | | |
| | | LockFile | [] | win.lockfile | [] | 2022-09-20 | | | |
| | | Locky (Decryptor) | [] | win.locky_decryptor | [] | 2016-04-19 | | | |
| | | LockPOS | [] | win.lock_pos | [] | 2018-02-26 | | | |
| | | LogPOS | [] | win.logpos | [] | 2022-09-19 | | | |
| | | Logtu | [] | win.logtu | [] | 2022-08-11 | | | |
| | | LOLSnif | [] | win.lolsnif | [] | 2021-03-16 | | | |
| | | LONGWATCH | [] | win.longwatch | ['APT34'] | 2021-06-29 | | | |
| | | Lookback | [] | win.lookback | ['TA410'] | 2022-09-30 | | | |
| | | Lorenz | [] | win.lorenz | [] | 2023-02-27 | | | |
| | | Loup | [] | win.loup | [] | 2020-08-25 | | | |
| | | LOWBALL | [] | win.lowball | ['Temper Panda'] | 2021-07-20 | | | |
| | | LOWKEY | ['PortReuse'] | win.lowkey | ['APT41'] | 2022-03-10 | | | |
| | | LOWZERO | [] | win.lowzero | ['Lucky Cat'] | 2023-02-09 | | | |
| | | LPEClient | ['LPEClientTea'] | win.lpeclient | ['Lazarus Group'] | 2023-11-27 | | | |
| | | Luca Stealer | [] | win.luca_stealer | [] | 2022-12-15 | | | |
| | | Lumar | ['PovertyStealer'] | win.lumar | [] | 2024-10-21 | | | |
| | | LunchMoney | [] | win.lunchmoney | ['Leviathan'] | 2019-03-10 | | | |
| | | Lurk | [] | win.lurk | [] | 2016-05-10 | | | |
| | | m0yv | [] | win.m0yv | [] | 2023-04-02 | | | |
| | | MadMax | [] | win.madmax | [] | 2016-12-28 | | | |
| | | Magala | [] | win.magala | [] | 2017-08-01 | | | |
| | | Maggie | [] | win.maggie | [] | 2022-10-30 | | | |
| | | MagicRAT | [] | win.magic_rat | ['Lazarus Group', 'Silent Chollima'] | 2023-10-17 | | | |
| | | Magniber | [] | win.magniber | [] | 2024-01-31 | | | |
| | | Mail-O | [] | win.mail_o | [] | 2022-07-29 | | | |
| | | Makadocs | [] | win.makadocs | ['Poseidon Group'] | 2021-07-20 | | | |
| | | MakLoader | [] | win.makloader | [] | 2018-10-03 | | | |
| | | Makop | [] | win.makop | [] | 2023-08-14 | | | |
| | | Maktub | [] | win.maktub | [] | 2023-05-26 | | | |
| | | MalumPOS | [] | win.malumpos | [] | 2018-04-23 | | | |
| | | Mangzamel | ['junidor', 'mengkite', 'vedratve'] | win.mangzamel | ['Red Menshen'] | 2022-08-30 | | | |
| | | ManItsMe | [] | win.manitsme | ['Comment Crew'] | 2018-02-13 | | | |
| | | Manjusaka | [] | win.manjusaka | [] | 2022-08-22 | | | |
| | | Maoloa | [] | win.maoloa | [] | 2023-05-30 | | | |
| | | MAPIget | [] | win.mapiget | ['Comment Crew'] | 2018-02-10 | | | |
| | | Marap | [] | win.marap | [] | 2020-08-28 | | | |
| | | Mariposa | ['Rimecud', 'Palevo', 'Autorun'] | win.mariposa | [] | 2019-10-09 | | | |
| | | Matrix Banker | [] | win.matrix_banker | [] | 2017-07-11 | | | |
| | | Matryoshka RAT | [] | win.matryoshka_rat | ['Rocket Kitten'] | 2017-09-14 | | | |
| | | Maudi | [] | win.maudi | [] | 2020-01-27 | | | |
| | | Maui Ransomware | [] | win.maui | ['Silent Chollima'] | 2024-02-08 | | | |
| | | MBRlock | ['DexLocker'] | win.mbrlock | [] | 2018-03-01 | | | |
| | | MBR Locker | [] | win.mbrlocker | [] | 2021-11-22 | | | |
| | | Mebromi | ['MyBios'] | win.mebromi | [] | 2018-06-28 | | | |
| | | MECHANICAL | ['GoldStamp'] | win.mechanical | ['Kimsuky'] | 2023-02-09 | | | |
| | | MediaPI | ['Eyeglass'] | win.mediapi | ['Charming Kitten'] | 2024-03-28 | | | |
| | | MedusaLocker | ['AKO Ransomware', 'AKO Doxware', 'MedusaReborn'] | win.medusalocker | [] | 2024-09-26 | | | |
| | | Erebus | [] | win.erebus | [] | 2017-02-15 | | | |
| | | EternalPetya | ['ExPetr', 'Pnyetya', 'Petna', 'NotPetya', 'Nyetya', 'NonPetya', 'nPetya', 'Diskcoder.C', 'BadRabbit'] | win.eternal_petya | ['TeleBots', 'Sandworm'] | 2024-04-23 | | | |
| | | EtumBot | ['HighTide'] | win.etumbot | ['IXESHE'] | 2020-05-23 | | | |
| | | Evilbunny | [] | win.evilbunny | ['SNOWGLOBE'] | 2024-10-09 | | | |
| | | EvilGrab | ['Vidgrab'] | win.evilgrab | ['Stone Panda'] | 2020-05-18 | | | |
| | | EvilPony | ['CREstealer'] | win.evilpony | [] | 2017-10-20 | | | |
| | | Exaramel | [] | win.exaramel | ['TeleBots'] | 2022-08-25 | | | |
| | | Excalibur | ['Sabresac', 'Saber'] | win.excalibur | [] | 2018-04-26 | | | |
| | | Expiro | ['Xpiro'] | win.expiro | [] | 2023-08-31 | | | |
| | | ExplosiveRAT | [] | win.explosive_rat | [] | 2022-10-07 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | FakeRean | ['Braviax'] | win.fakerean | [] | 2018-07-31 | | | |
| | | FakeTC | [] | win.faketc | [] | 2021-08-17 | | | |
| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |