| | | RatankbaPOS | ['RATANKBAPOS'] | win.ratankbapos | ['Lazarus Group'] | 2023-08-14 | | | |
| | | RATel | [] | win.ratel | [] | 2023-08-25 | | | |
| | | Raven Stealer | [] | win.ravenstealer | [] | 2025-09-17 | | | |
| | | RAWDOOR | [] | win.rawdoor | ['APT31'] | 2025-02-28 | | | |
| | | RawPOS | [] | win.rawpos | [] | 2020-04-17 | | | |
| | | RC2FM | [] | win.rc2fm | [] | 2022-08-25 | | | |
| | | RCS | ['Remote Control System', 'Crisis'] | win.rcs | ['Hacking Team', 'APT-C-34'] | 2024-11-25 | | | |
| | | RCtrl | [] | win.rctrl | ['APT 30'] | 2020-06-20 | | | |
| | | RDAT | ['GREYSTUFF'] | win.rdat | ['OilRig'] | 2025-06-16 | | | |
| | | ReactorBot | [] | win.reactorbot | [] | 2017-06-07 | | | |
| | | Reaver | [] | win.reaver | [] | 2019-05-17 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2025-02-28 | | | |
| | | RedAlpha | [] | win.redalpha | [] | 2018-07-06 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2024-02-16 | | | |
| | | RedLeaves | ['BUGJUICE'] | win.redleaves | ['Stone Panda'] | 2022-06-22 | | | |
| | | REDPEPPER | ['Adupib'] | win.redpepper | ['PLATINUM'] | 2020-01-01 | | | |
| | | REDSALT | ['Dipsind'] | win.redsalt | ['PLATINUM'] | 2020-01-20 | | | |
| | | REDSHAWL | [] | win.redshawl | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Redyms | [] | win.redyms | [] | 2018-10-18 | | | |
| | | Red Gambler | [] | win.red_gambler | [] | 2018-07-11 | | | |
| | | ReedBed | [] | win.reedbed | ['MALLARD SPIDER', 'UNC4393'] | 2025-03-28 | | | |
| | | Regin | [] | win.regin | [] | 2022-03-22 | | | |
| | | RegretLocker | [] | win.regretlocker | [] | 2023-05-25 | | | |
| | | win.rekoobe | ['tinyshell.win', 'tshd.win'] | win.rekoobew | ['FIN7'] | 2021-12-08 | | | |
| | | Rekt Loader | [] | win.rektloader | [] | 2020-07-15 | | | |
| | | RemCom | ['RemoteCommandExecution'] | win.remcom | [] | 2024-04-11 | | | |
| | | Lyposit | ['Lucky Locker', 'Adneukine', 'Bomba Locker'] | win.lyposit | [] | 2025-07-24 | | | |
| | | m0yv | [] | win.m0yv | [] | 2023-04-02 | | | |
| | | MadMax | [] | win.madmax | [] | 2016-12-28 | | | |
| | | Magala | [] | win.magala | [] | 2017-08-01 | | | |
| | | Maggie | [] | win.maggie | [] | 2022-10-30 | | | |
| | | MagicRAT | [] | win.magic_rat | ['Lazarus Group', 'Silent Chollima'] | 2023-10-17 | | | |
| | | Magniber | [] | win.magniber | [] | 2024-01-31 | | | |
| | | Mailto | ['Koko Ransomware', 'NetWalker'] | win.mailto | [] | 2022-04-07 | | | |
| | | Mail-O | [] | win.mail_o | [] | 2022-07-29 | | | |
| | | Makadocs | [] | win.makadocs | ['Poseidon Group'] | 2021-07-20 | | | |
| | | MakLoader | [] | win.makloader | [] | 2018-10-03 | | | |
| | | Makop | [] | win.makop | [] | 2023-08-14 | | | |
| | | Maktub | [] | win.maktub | [] | 2023-05-26 | | | |
| | | MalumPOS | [] | win.malumpos | [] | 2018-04-23 | | | |
| | | Mangzamel | ['junidor', 'mengkite', 'vedratve'] | win.mangzamel | ['Red Menshen'] | 2022-08-30 | | | |
| | | ManItsMe | [] | win.manitsme | ['Comment Crew'] | 2018-02-13 | | | |
| | | Manjusaka | [] | win.manjusaka | [] | 2022-08-22 | | | |
| | | Maoloa | [] | win.maoloa | [] | 2023-05-30 | | | |
| | | MAPIget | [] | win.mapiget | ['Comment Crew'] | 2018-02-10 | | | |
| | | Marap | [] | win.marap | [] | 2020-08-28 | | | |
| | | Mariposa | ['Rimecud', 'Palevo', 'Autorun'] | win.mariposa | [] | 2019-10-09 | | | |
| | | Mars Stealer | [] | win.mars_stealer | [] | 2024-11-26 | | | |
| | | Matanbuchus | [] | win.matanbuchus | [] | 2024-11-25 | | | |
| | | Matrix Banker | [] | win.matrix_banker | [] | 2017-07-11 | | | |
| | | Matryoshka RAT | [] | win.matryoshka_rat | ['Rocket Kitten'] | 2017-09-14 | | | |
| | | Matsnu | [] | win.matsnu | [] | 2025-07-24 | | | |
| | | Maudi | [] | win.maudi | [] | 2020-01-27 | | | |
| | | Maui Ransomware | [] | win.maui | ['Silent Chollima'] | 2024-02-08 | | | |
| | | MAYBEROBOT | ['SIMPLEFIX'] | win.mayberobot | ['Callisto'] | 2025-11-10 | | | |
| | | Maze | ['ChaCha'] | win.maze | ['FIN6', 'TA2101'] | 2025-09-09 | | | |
| | | MBRlock | ['DexLocker'] | win.mbrlock | [] | 2018-03-01 | | | |
| | | MBR Locker | [] | win.mbrlocker | [] | 2021-11-22 | | | |
| | | Mebromi | ['MyBios'] | win.mebromi | [] | 2018-06-28 | | | |
| | | MECHANICAL | ['GoldStamp'] | win.mechanical | ['Kimsuky'] | 2023-02-09 | | | |
| | | MediaPI | ['Eyeglass'] | win.mediapi | ['Charming Kitten'] | 2024-03-28 | | | |
| | | Meduza Stealer | [] | win.meduza | [] | 2025-06-24 | | | |
| | | MegaCortex | [] | win.megacortex | [] | 2023-01-06 | | | |
| | | MeguminTrojan | [] | win.megumin | [] | 2022-08-28 | | | |
| | | MeltingClaw | [] | win.meltingclaw | [] | 2025-11-25 | | | |
| | | Meow | [] | win.meow | [] | 2023-05-26 | | | |
| | | Merdoor | [] | win.merdoor | [] | 2023-08-28 | | | |
| | | Mespinoza | ['pysa'] | win.mespinoza | [] | 2022-06-27 | | | |
| | | MetadataBin | ['Ransomware32'] | win.metadatabin | [] | 2020-10-29 | | | |
| | | MetaStealer | [] | win.metastealer | ['UNC5537'] | 2025-11-05 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-11-13 | | | |
| | | Mewsei | [] | win.mewsei | [] | 2016-04-19 | | | |
| | | MgBot | ['BLame', 'MgmBot', 'POCOSTICK'] | win.mgbot | [] | 2024-10-29 | | | |
| | | Miancha | [] | win.miancha | [] | 2017-05-21 | | | |
| | | Micrass | [] | win.micrass | [] | 2018-04-13 | | | |
| | | MicroBackdoor | [] | win.microbackdoor | ['Ghostwriter'] | 2022-08-05 | | | |
| | | Microcin | [] | win.microcin | [] | 2022-08-26 | | | |
| | | Mikoponi | [] | win.mikoponi | [] | 2019-10-13 | | | |
| | | MILKMAID | [] | win.milkmaid | ['APT 30'] | 2018-04-26 | | | |
| | | Milum | [] | win.milum | [] | 2021-07-09 | | | |
| | | mim221 | [] | win.mim221 | ['Operation Soft Cell'] | 2023-03-27 | | | |
| | | Mimic Ransomware | [] | win.mimic | [] | 2025-05-21 | | | |
| | | Mindware | [] | win.mindware | [] | 2022-06-09 | | | |
| | | MiniASP | [] | win.miniasp | ['Comment Crew'] | 2018-02-10 | | | |
| | | miniBlindingCan | ['AIRDRY.V2', 'EventHorizon'] | win.miniblindingcan | ['Lazarus Group'] | 2025-09-15 | | | |
| | | MiniBrowse | [] | win.minibrowse | [] | 2025-12-15 | | | |
| | | MINIBUS | [] | win.minibus | [] | 2024-04-29 | | | |
| | | MiniPocket | [] | win.minipocket | ['Turla'] | 2024-12-09 | | | |
| | | miniTypeFrame | [] | win.minitypeframe | ['Lazarus Group'] | 2023-12-11 | | | |
| | | Mirage | [] | win.mirage | ['Mirage'] | 2020-10-02 | | | |
| | | MirageFox | [] | win.miragefox | ['Mirage'] | 2018-06-19 | | | |
| | | Mirai | [] | win.mirai | [] | 2022-09-16 | | | |
| | | MirrorKey | [] | win.mirrorkey | [] | 2023-02-17 | | | |
| | | Misfox | ['Dromedan', 'MixFox', 'ModPack'] | win.misfox | [] | 2024-06-05 | | | |
| | | Misha | [] | win.misha | [] | 2022-11-28 | | | |
| | | MISTCLOAK | ['HIUPAN'] | win.mistcloak | [] | 2023-09-08 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-11-21 | | | |
| | | Miuref | [] | win.miuref | [] | 2016-04-19 | | | |
| | | MiyaRAT | [] | win.miya_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | MMON | ['Kaptoxa'] | win.mmon | [] | 2022-01-05 | | | |