| | | AstarionRAT | ['MIMICRAT'] | win.astarion_rat | [] | 2026-03-11 | | | |
| | | AstraLocker | [] | win.astralocker | [] | 2022-08-05 | | | |
| | | Atharvan | [] | win.atharvan | ['Silent Chollima'] | 2023-12-15 | | | |
| | | ATI-Agent | [] | win.ati_agent | ['APT 29'] | 2022-03-14 | | | |
| | | Atlantida | [] | win.atlantida | [] | 2024-09-23 | | | |
| | | AtlasAgent | [] | win.atlas_agent | [] | 2023-10-16 | | | |
| | | ATMii | [] | win.atmii | [] | 2017-11-17 | | | |
| | | ATMitch | [] | win.atmitch | [] | 2020-04-26 | | | |
| | | Atmosphere | [] | win.atmosphere | ['Silence group'] | 2019-05-10 | | | |
| | | ATMSpitter | [] | win.atmspitter | ['Cobalt'] | 2020-05-23 | | | |
| | | ATOMSILO | [] | win.atomsilo | [] | 2023-05-15 | | | |
| | | Attor | [] | win.attor | [] | 2022-12-12 | | | |
| | | AuKill | ['SophosKill'] | win.aukill | [] | 2023-04-25 | | | |
| | | Auriga | ['Riodrv'] | win.auriga | ['Comment Crew'] | 2018-02-10 | | | |
| | | Aurora | ['OneKeyLocker'] | win.aurora | ['Oktropys'] | 2023-04-22 | | | |
| | | Avaddon | [] | win.avaddon | ['RIDDLE SPIDER'] | 2022-04-13 | | | |
| | | AvastDisabler | [] | win.avast_disabler | [] | 2017-02-15 | | | |
| | | AVCrypt | [] | win.avcrypt | [] | 2022-11-15 | | | |
| | | Aveo | [] | win.aveo | [] | 2020-05-23 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['ANTHROPOID SPIDER', 'Anunak'] | 2025-09-01 | | | |
| | | AvosLocker | [] | win.avos_locker | [] | 2022-10-14 | | | |
| | | Unidentified 061 | [] | win.avrecon | [] | 2019-07-31 | | | |
| | | Avzhan | [] | win.avzhan | [] | 2018-02-26 | | | |
| | | Ayegent | [] | win.ayegent | [] | 2016-12-28 | | | |
| | | Aytoke | [] | win.aytoke | [] | 2021-10-24 | | | |
| | | Azov Wiper | [] | win.azov_wiper | [] | 2023-01-25 | | | |
| | | Babar | ['SNOWBALL'] | win.babar | ['SNOWGLOBE'] | 2020-06-08 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2024-11-25 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2024-09-13 | | | |
| | | BabyShark | ['LATEOP'] | win.babyshark | ['Kimsuky'] | 2025-06-11 | | | |
| | | Bachosens | [] | win.bachosens | [] | 2023-03-16 | | | |
| | | BACKBEND | [] | win.backbend | ['APT 30'] | 2019-04-17 | | | |
| | | BackConfig | [] | win.backconfig | ['VICEROY TIGER'] | 2022-07-29 | | | |
| | | backspace | ['Lecna', 'ZRLnk'] | win.backspace | ['APT 30'] | 2022-08-25 | | | |
| | | BackSwap | [] | win.backswap | [] | 2022-04-25 | | | |
| | | BADAUDIO | [] | win.badaudio | ['APT24'] | 2026-03-02 | | | |
| | | BADCALL | [] | win.badcall | ['Lazarus Group'] | 2024-11-29 | | | |
| | | BadEncript | [] | win.badencript | [] | 2017-04-29 | | | |
| | | badflick | [] | win.badflick | ['Leviathan'] | 2019-03-25 | | | |
| | | Korlia | ['Bisonal'] | win.korlia | ['Tonto Team'] | 2023-09-20 | | | |
| | | KPOT Stealer | ['Khalesi', 'Kpot'] | win.kpot_stealer | [] | 2023-07-24 | | | |
| | | KrBanker | ['BlackMoon'] | win.krbanker | [] | 2024-04-23 | | | |
| | | KrDownloader | [] | win.krdownloader | [] | 2017-05-12 | | | |
| | | Kronos | ['Osiris'] | win.kronos | [] | 2023-05-21 | | | |
| | | KSL0T | [] | win.ksl0t | ['Turla'] | 2019-07-31 | | | |
| | | KTLVdoor | [] | win.ktlv_door | ['Earth Lusca'] | 2024-09-13 | | | |
| | | Kuaibu | ['Barys', 'Gofot', 'Kuaibpy'] | win.kuaibu8 | [] | 2017-03-29 | | | |
| | | KugelBlitz | [] | win.kugelblitz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Kuluoz | [] | win.kuluoz | [] | 2017-11-23 | | | |
| | | Kurton | [] | win.kurton | ['Comment Crew'] | 2018-02-13 | | | |
| | | Kutaki | [] | win.kutaki | [] | 2024-05-21 | | | |
| | | Kwampirs | [] | win.kwampirs | ['Orangeworm'] | 2022-03-15 | | | |
| | | Lambert | ['Plexor'] | win.lambert | ['Longhorn'] | 2022-05-04 | | | |
| | | LambLoad | ['OfficeCertTea'] | win.lambload | ['Lazarus Group'] | 2025-09-15 | | | |
| | | Laplas (Reverseshell) | [] | win.laplas_shell | [] | 2025-11-13 | | | |
| | | LatentBot | [] | win.latentbot | [] | 2022-06-09 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2026-02-25 | | | |
| | | Laturo Stealer | [] | win.laturo | [] | 2019-10-31 | | | |
| | | LazarDoor | [] | win.lazardoor | ['Lazarus Group'] | 2023-12-27 | | | |
| | | LazarLoader | [] | win.lazarloader | ['Lazarus Group'] | 2023-06-29 | | | |
| | | KillDisk (Lazarus) | ['KillDisk.NBO'] | win.lazarus_killdisk | ['Lazarus Group'] | 2023-08-31 | | | |
| | | Laziok | [] | win.laziok | [] | 2022-03-01 | | | |
| | | LCPDot | [] | win.lcpdot | ['Lazarus Group'] | 2023-08-03 | | | |
| | | LDR4 | [] | win.ldr4 | [] | 2023-01-13 | | | |
| | | Leash | [] | win.leash | ['Magic Hound'] | 2017-12-15 | | | |
| | | Lechiket | [] | win.lechiket | [] | 2024-04-29 | | | |
| | | Lemon Duck | [] | win.lemonduck | [] | 2022-04-24 | | | |
| | | Leouncia | ['shoco'] | win.leouncia | ['APT5'] | 2021-11-02 | | | |
| | | Lethic | [] | win.lethic | [] | 2025-03-21 | | | |
| | | LIGHTBUNNY | [] | win.lightbunny | [] | 2023-04-25 | | | |
| | | LightlessCan | ['SIDESHOW'] | win.lightlesscan | ['Lazarus Group'] | 2025-11-05 | | | |
| | | LightNeuron | ['NETTRANS', 'XTRANS'] | win.lightneuron | ['Turla'] | 2025-04-28 | | | |
| | | LIGHTRAIL | [] | win.lightrail | [] | 2024-04-29 | | | |
| | | LIGHTWORK | [] | win.lightwork | [] | 2023-05-26 | | | |
| | | Lilith | [] | win.lilith | ['Silent Chollima', 'Tick'] | 2025-04-25 | | | |
| | | LinseningSvr | [] | win.linseningsvr | [] | 2020-05-27 | | | |
| | | Listrix | [] | win.listrix | ['Energetic Bear'] | 2020-04-21 | | | |
| | | LiteDuke | [] | win.liteduke | ['APT29'] | 2020-05-18 | | | |
| | | LOBSHOT | [] | win.lobshot | [] | 2023-07-21 | | | |
| | | LockerGoga | [] | win.lockergoga | ['FIN6'] | 2026-02-25 | | | |
| | | LockFile | [] | win.lockfile | [] | 2022-09-20 | | | |
| | | Locky (Decryptor) | [] | win.locky_decryptor | [] | 2016-04-19 | | | |
| | | LockPOS | [] | win.lock_pos | [] | 2018-02-26 | | | |
| | | LODEINFO | [] | win.lodeinfo | ['MirrorFace'] | 2025-02-19 | | | |
| | | LogPOS | [] | win.logpos | [] | 2022-09-19 | | | |
| | | Logtu | [] | win.logtu | [] | 2022-08-11 | | | |
| | | Loki Password Stealer (PWS) | ['Burkina', 'Loki', 'LokiBot', 'LokiPWS'] | win.lokipws | ['SWEED', 'The Gorgon Group', 'Cobalt'] | 2025-10-15 | | | |
| | | LONGWATCH | [] | win.longwatch | ['APT34'] | 2021-06-29 | | | |
| | | Lookback | [] | win.lookback | ['TA410'] | 2025-10-20 | | | |
| | | Lorenz | [] | win.lorenz | [] | 2023-02-27 | | | |
| | | Loup | [] | win.loup | [] | 2020-08-25 | | | |
| | | LOWBALL | [] | win.lowball | ['Temper Panda'] | 2021-07-20 | | | |
| | | LOWKEY | ['PortReuse'] | win.lowkey | ['APT41'] | 2022-03-10 | | | |
| | | LOWZERO | [] | win.lowzero | ['Lucky Cat'] | 2023-02-09 | | | |
| | | LPEClient | ['LPEClientTea'] | win.lpeclient | ['Lazarus Group'] | 2023-11-27 | | | |
| | | Luca Stealer | [] | win.luca_stealer | [] | 2022-12-15 | | | |
| | | Lumar | ['PovertyStealer'] | win.lumar | [] | 2024-10-21 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2026-05-05 | | | |
| | | LunchMoney | [] | win.lunchmoney | ['Leviathan'] | 2019-03-10 | | | |
| | | Lurk | [] | win.lurk | [] | 2016-05-10 | | | |