| | | Lynx | [] | win.lynx | [] | 2026-02-03 | | | |
| | | Lyposit | ['Lucky Locker', 'Adneukine', 'Bomba Locker'] | win.lyposit | [] | 2025-07-24 | | | |
| | | m0yv | [] | win.m0yv | [] | 2023-04-02 | | | |
| | | MadMax | [] | win.madmax | [] | 2016-12-28 | | | |
| | | Magala | [] | win.magala | [] | 2017-08-01 | | | |
| | | Maggie | [] | win.maggie | [] | 2022-10-30 | | | |
| | | MagicRAT | [] | win.magic_rat | ['Lazarus Group', 'Silent Chollima'] | 2023-10-17 | | | |
| | | Magniber | [] | win.magniber | [] | 2024-01-31 | | | |
| | | Mailto | ['Koko Ransomware', 'NetWalker'] | win.mailto | [] | 2022-04-07 | | | |
| | | Mail-O | [] | win.mail_o | [] | 2022-07-29 | | | |
| | | Makadocs | [] | win.makadocs | ['Poseidon Group'] | 2021-07-20 | | | |
| | | MakLoader | [] | win.makloader | [] | 2018-10-03 | | | |
| | | Makop | [] | win.makop | [] | 2023-08-14 | | | |
| | | Maktub | [] | win.maktub | [] | 2023-05-26 | | | |
| | | MalumPOS | [] | win.malumpos | [] | 2018-04-23 | | | |
| | | Mangzamel | ['junidor', 'mengkite', 'vedratve'] | win.mangzamel | ['Red Menshen'] | 2022-08-30 | | | |
| | | ManItsMe | [] | win.manitsme | ['Comment Crew'] | 2018-02-13 | | | |
| | | Manjusaka | [] | win.manjusaka | [] | 2022-08-22 | | | |
| | | Maoloa | [] | win.maoloa | [] | 2023-05-30 | | | |
| | | MAPIget | [] | win.mapiget | ['Comment Crew'] | 2018-02-10 | | | |
| | | Marap | [] | win.marap | [] | 2020-08-28 | | | |
| | | Mariposa | ['Rimecud', 'Palevo', 'Autorun'] | win.mariposa | [] | 2019-10-09 | | | |
| | | Mars Stealer | [] | win.mars_stealer | [] | 2024-11-26 | | | |
| | | MaskGramStealer | [] | win.maskgramstealer | [] | 2026-01-05 | | | |
| | | Matanbuchus | [] | win.matanbuchus | [] | 2026-03-12 | | | |
| | | Matrix Banker | [] | win.matrix_banker | [] | 2017-07-11 | | | |
| | | Matryoshka RAT | [] | win.matryoshka_rat | ['Rocket Kitten'] | 2017-09-14 | | | |
| | | Matsnu | [] | win.matsnu | [] | 2025-07-24 | | | |
| | | Maudi | [] | win.maudi | [] | 2020-01-27 | | | |
| | | Maui Ransomware | [] | win.maui | ['Silent Chollima'] | 2024-02-08 | | | |
| | | MAYBEROBOT | ['SIMPLEFIX'] | win.mayberobot | ['Callisto'] | 2025-11-10 | | | |
| | | Maze | ['ChaCha'] | win.maze | ['FIN6', 'TA2101'] | 2025-09-09 | | | |
| | | MBRlock | ['DexLocker'] | win.mbrlock | [] | 2018-03-01 | | | |
| | | MBR Locker | [] | win.mbrlocker | [] | 2021-11-22 | | | |
| | | Mebromi | ['MyBios'] | win.mebromi | [] | 2018-06-28 | | | |
| | | MECHANICAL | ['GoldStamp'] | win.mechanical | ['Kimsuky'] | 2023-02-09 | | | |
| | | MediaPI | ['Eyeglass'] | win.mediapi | ['Charming Kitten'] | 2024-03-28 | | | |
| | | Medusa | [] | win.medusa | [] | 2026-02-27 | | | |
| | | FatDuke | [] | win.fatduke | ['APT29'] | 2020-05-23 | | | |
| | | FCT | [] | win.fct | [] | 2020-02-10 | | | |
| | | FeedLoad | [] | win.feed_load | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Felismus | [] | win.felismus | ['Sowbug'] | 2017-11-21 | | | |
| | | fengine | [] | win.fengine | [] | 2022-08-22 | | | |
| | | Feodo | ['Cridex', 'Bugat'] | win.feodo | [] | 2025-07-14 | | | |
| | | Ficker Stealer | [] | win.fickerstealer | [] | 2022-11-09 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-08-25 | | | |
| | | Final1stSpy | [] | win.final1stspy | ['APT37'] | 2018-10-23 | | | |
| | | FindPOS | ['Poseidon'] | win.findpos | [] | 2021-09-19 | | | |
| | | FinFisher RAT | ['FinSpy'] | win.finfisher | [] | 2023-03-24 | | | |
| | | Fireball | [] | win.fireball | [] | 2017-07-11 | | | |
| | | Fire Chili | [] | win.firechili | ['Shell Crew'] | 2022-04-04 | | | |
| | | FishMaster | ['JollyJellyfish'] | win.fishmaster | ['Earth Lusca'] | 2023-04-28 | | | |
| | | FK_Undead | ['Undead'] | win.fk_undead | [] | 2024-10-14 | | | |
| | | Flagpro | ['BUSYICE'] | win.flagpro | ['BlackTech'] | 2023-05-21 | | | |
| | | Flame | ['sKyWIper'] | win.flame | [] | 2023-10-05 | | | |
| | | FLASHFLOOD | [] | win.flashflood | ['APT 30'] | 2022-08-25 | | | |
| | | FlashDevelop | [] | win.flash_develop | ['Handala'] | 2024-10-18 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | ['TA505'] | 2022-02-14 | | | |
| | | FlawedGrace | ['GraceWire'] | win.flawedgrace | ['TA505'] | 2024-08-29 | | | |
| | | FlokiBot | [] | win.floki_bot | [] | 2018-01-22 | | | |
| | | FlowerShop | [] | win.flowershop | [] | 2020-05-07 | | | |
| | | Floxif | [] | win.floxif | [] | 2024-12-06 | | | |
| | | Flusihoc | [] | win.flusihoc | [] | 2017-10-09 | | | |
| | | FlyingDutchman | [] | win.flying_dutchman | ['Calypso group'] | 2019-11-12 | | | |
| | | FoalShell | [] | win.foalshell | ['YoroTrooper'] | 2026-01-19 | | | |
| | | Fobber | [] | win.fobber | [] | 2017-08-01 | | | |
| | | Fog | [] | win.fog | [] | 2025-06-24 | | | |
| | | FONIX | [] | win.fonix | [] | 2021-05-04 | | | |
| | | ForestTiger | ['ScoringMathTea'] | win.forest_tiger | ['Lazarus Group'] | 2025-09-15 | | | |
| | | FormerFirstRAT | ['ffrat'] | win.former_first_rat | ['DragonOK', 'Samurai Panda'] | 2022-08-26 | | | |
| | | Freenki Loader | ['SHUTTERSPEED'] | win.freenki | ['APT37'] | 2023-08-17 | | | |
| | | FriedEx | ['BitPaymer', 'DoppelPaymer', 'IEncrypt'] | win.friedex | ['INDRIK SPIDER'] | 2026-02-25 | | | |
| | | FROZENHILL | [] | win.frozenhill | [] | 2025-03-28 | | | |
| | | FudModule | ['LIGHTSHOW'] | win.fudmodule | ['Lazarus Group'] | 2026-03-02 | | | |
| | | FULLMETAL | [] | win.fullmetal | [] | 2025-11-13 | | | |
| | | FunkSec | [] | win.funksec | [] | 2025-01-14 | | | |
| | | FunnyDream | [] | win.funny_dream | [] | 2021-12-23 | | | |
| | | Furtim | [] | win.furtim | [] | 2017-02-15 | | | |
| | | FusionDrive | [] | win.fusiondrive | ['APT28'] | 2023-04-25 | | | |
| | | FuwuqiDrama | [] | win.fuwuqidrama | ['Lazarus Group'] | 2023-09-11 | | | |
| | | FuxSocy | [] | win.fuxsocy | [] | 2019-11-15 | | | |
| | | Gacrux | [] | win.gacrux | [] | 2020-10-29 | | | |
| | | Gameover DGA | [] | win.gameover_dga | [] | 2016-04-18 | | | |
| | | Gameover P2P | ['GOZ', 'Gameover ZeuS', 'Mapp', 'ZeuS P2P'] | win.gameover_p2p | [] | 2024-05-14 | | | |
| | | Gamotrol | [] | win.gamotrol | [] | 2018-07-24 | | | |
| | | Gandcrab | ['GrandCrab'] | win.gandcrab | ['Pinchy Spider'] | 2026-05-05 | | | |
| | | Gaudox | [] | win.gaudox | [] | 2017-11-21 | | | |
| | | Gazer | ['WhiteBear'] | win.gazer | ['Turla'] | 2023-07-28 | | | |
| | | GCleaner | [] | win.gcleaner | [] | 2024-04-02 | | | |
| | | gcman | [] | win.gcman | [] | 2018-09-11 | | | |
| | | GEARSHIFT | [] | win.gearshift | ['APT41'] | 2019-08-13 | | | |
| | | GEMCUTTER | [] | win.gemcutter | ['APT 30'] | 2019-04-17 | | | |
| | | GeminiDuke | [] | win.geminiduke | [] | 2022-12-05 | | | |
| | | Get2 | ['FRIENDSPEAK', 'GetandGo'] | win.get2 | ['TA505'] | 2022-02-14 | | | |
| | | GetMail | [] | win.getmail | ['Comment Crew'] | 2018-02-10 | | | |
| | | GetMyPass | ['getmypos'] | win.getmypass | [] | 2022-09-19 | | | |
| | | Gh0stTimes | [] | win.gh0sttimes | [] | 2023-06-23 | | | |
| | | Ghole | ['Gholee', 'CoreImpact (Modified)'] | win.ghole | ['Rocket Kitten'] | 2022-04-29 | | | |
| | | GhostEmperor | [] | win.ghostemperor | [] | 2024-10-21 | | | |
| | | GhostSocks | [] | win.ghostsocks | [] | 2026-05-05 | | | |