| | | Unidentified 096 (Keylogger) | [] | win.unidentified_096 | ['TA410'] | 2025-10-15 | | | |
| | | Unidentified 098 (APT29 Slack Downloader) | [] | win.unidentified_098 | ['APT29'] | 2022-12-20 | | | |
| | | Unidentified 099 (APT29 Dropbox Loader) | [] | win.unidentified_099 | ['APT29'] | 2024-02-02 | | | |
| | | Unidentified 100 (APT-Q-12) | [] | win.unidentified_100 | ['APT-Q-12'] | 2023-12-15 | | | |
| | | Unidentified 103 (FIN8) | ['Ragnar Loader', 'Sardonic'] | win.unidentified_103 | [] | 2025-03-06 | | | |
| | | Unidentified 104 | [] | win.unidentified_104 | [] | 2023-06-01 | | | |
| | | Unidentified 105 | [] | win.unidentified_105 | ['Silent Chollima'] | 2023-07-24 | | | |
| | | Unidentified 106 | [] | win.unidentified_106 | [] | 2023-10-18 | | | |
| | | Unidentified 107 (APT29) | ['ICEBEAT'] | win.unidentified_107 | [] | 2023-10-18 | | | |
| | | Unidentified 108 | [] | win.unidentified_108 | [] | 2023-07-31 | | | |
| | | Unidentified 109 (Lazarus?) | ['IMEEX'] | win.unidentified_109 | [] | 2024-10-20 | | | |
| | | Unidentified 110 (RustyFlag) | [] | win.unidentified_110 | [] | 2023-09-20 | | | |
| | | Unidentified 112 (Rust-based Stealer) | [] | win.unidentified_112 | [] | 2023-12-27 | | | |
| | | Unidentified 113 (RAT) | [] | win.unidentified_113 | [] | 2024-01-22 | | | |
| | | Unidentified 115 (Nim Loader) | [] | win.unidentified_115 | [] | 2024-03-06 | | | |
| | | Unidentified 116 (Miner) | [] | win.unidentified_116 | [] | 2024-08-29 | | | |
| | | Unidentified 118 | [] | win.unidentified_118 | [] | 2025-03-05 | | | |
| | | Unidentified 121 | [] | win.unidentified_121 | [] | 2025-04-28 | | | |
| | | Unidentified 124 (Azure Functions) | [] | win.unidentified_124 | [] | 2026-01-05 | | | |
| | | UPAS | ['Rombrast'] | win.upas | [] | 2025-07-24 | | | |
| | | Upatre | [] | win.upatre | [] | 2023-04-18 | | | |
| | | Urausy | [] | win.urausy | [] | 2025-07-24 | | | |
| | | USBferry | [] | win.usbferry | ['Pirate Panda'] | 2021-12-17 | | | |
| | | Valkyrie Stealer | [] | win.valkyrie_stealer | [] | 2025-12-15 | | | |
| | | VanHelsing | [] | win.vanhelsing | [] | 2025-05-20 | | | |
| | | VaporRage | ['BOOMMIC'] | win.vapor_rage | ['APT29'] | 2024-02-02 | | | |
| | | Varenyky | [] | win.varenyky | [] | 2019-12-19 | | | |
| | | Vawtrak | ['Catch', 'grabnew', 'NeverQuest'] | win.vawtrak | ['Lunar Spider'] | 2023-03-20 | | | |
| | | VEILEDSIGNAL | [] | win.veiledsignal | ['Lazarus Group'] | 2023-05-26 | | | |
| | | VELETRIX | [] | win.veletrix | [] | 2025-08-19 | | | |
| | | Velso | [] | win.velso | [] | 2018-02-13 | | | |
| | | Vendetta | [] | win.vendetta | [] | 2023-04-08 | | | |
| | | VenomLoader | [] | win.venomloader | [] | 2024-12-06 | | | |
| | | VENON | [] | win.venon | [] | 2026-03-23 | | | |
| | | Vermilion Strike | [] | win.vermilion_strike | [] | 2021-09-14 | | | |
| | | Vflooder | [] | win.vflooder | [] | 2022-11-01 | | | |
| | | VHD Ransomware | [] | win.vhd_ransomware | [] | 2022-06-27 | | | |
| | | VictoryGate | [] | win.victorygate | [] | 2022-02-19 | | | |
| | | VIGILANT CLEANER | ['VIGILANT CHECKER'] | win.vigilant_cleaner | [] | 2021-08-20 | | | |
| | | virdetdoor | [] | win.virdetdoor | [] | 2018-09-13 | | | |
| | | VirLock | [] | win.virlock | [] | 2024-11-25 | | | |
| | | VIRTUALGATE | [] | win.virtualgate | [] | 2022-10-05 | | | |
| | | Virut | [] | win.virut | [] | 2025-05-02 | | | |
| | | VM Zeus | ['VMzeus', 'ZeusVM', 'Zberp'] | win.vmzeus | [] | 2018-05-22 | | | |
| | | Vobfus | ['Beebone'] | win.vobfus | [] | 2022-11-12 | | | |
| | | Vohuk | [] | win.vohuk | [] | 2022-12-19 | | | |
| | | Void | ['VoidCrypt'] | win.void | [] | 2026-02-25 | | | |
| | | Voidoor | [] | win.voidoor | [] | 2023-07-19 | | | |
| | | Voldemort | [] | win.voldemort | [] | 2025-07-17 | | | |
| | | Volgmer | ['FALLCHILL', 'Manuscrypt'] | win.volgmer | ['Lazarus Group'] | 2025-07-29 | | | |
| | | VSingle | [] | win.vsingle | ['Lazarus Group', 'Silent Chollima'] | 2023-08-28 | | | |
| | | vSkimmer | [] | win.vskimmer | [] | 2018-04-26 | | | |
| | | vxRat | [] | win.vx_rat | [] | 2025-10-20 | | | |
| | | Vyveva RAT | [] | win.vyveva | ['Lazarus Group'] | 2023-09-18 | | | |
| | | w32times | [] | win.w32times | ['UPS'] | 2018-04-13 | | | |
| | | WannaCryptor | ['Wana Decrypt0r', 'WannaCry', 'WannaCrypt', 'Wcry'] | win.wannacryptor | ['Lazarus Group'] | 2026-05-05 | | | |
| | | WannaHusky | [] | win.wannahusky | [] | 2022-04-08 | | | |
| | | Warezov | ['Stration', 'Opnis'] | win.warezov | [] | 2024-04-29 | | | |
| | | WarHawk | [] | win.warhawk | [] | 2024-08-29 | | | |
| | | WarLock | [] | win.warlock | [] | 2025-08-20 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-11-25 | | | |
| | | WastedLoader | [] | win.wastedloader | [] | 2022-07-01 | | | |
| | | WastedLocker | [] | win.wastedlocker | [] | 2026-05-05 | | | |
| | | WaterMiner | [] | win.waterminer | [] | 2018-08-01 | | | |
| | | WaterSpout | [] | win.waterspout | ['IXESHE'] | 2017-05-21 | | | |
| | | WebbyTea | [] | win.webbytea | ['Lazarus Group'] | 2025-09-15 | | | |
| | | WebC2-AdSpace | [] | win.webc2_adspace | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Ausov | [] | win.webc2_ausov | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Bolid | [] | win.webc2_bolid | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Cson | [] | win.webc2_cson | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-GreenCat | [] | win.webc2_greencat | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Head | [] | win.webc2_head | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Kt3 | [] | win.webc2_kt3 | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Qbp | [] | win.webc2_qbp | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Rave | [] | win.webc2_rave | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-Table | [] | win.webc2_table | ['Comment Crew'] | 2018-02-13 | | | |
| | | WebC2-UGX | [] | win.webc2_ugx | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebC2-Yahoo | [] | win.webc2_yahoo | ['Comment Crew'] | 2018-02-10 | | | |
| | | WebMonitor RAT | ['RevCode'] | win.webmonitor | [] | 2020-11-19 | | | |
| | | WhiskerSpy | [] | win.whiskerspy | [] | 2023-02-24 | | | |
| | | WhisperGate | ['PAYWIPE'] | win.whispergate | [] | 2026-01-05 | | | |
| | | WhiteBird | [] | win.whitebird | [] | 2020-10-02 | | | |
| | | WhiteBlackCrypt | ['WARYLOOK'] | win.whiteblackcrypt | [] | 2022-03-07 | | | |
| | | WinDealer | [] | win.windealer | [] | 2023-12-27 | | | |
| | | WinInetLoader | ['LIDSHOT'] | win.wininetloader | ['Lazarus Group'] | 2025-09-15 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2025-02-28 | | | |
| | | WinorDLL64 | [] | win.winordll64 | ['Lazarus Group'] | 2023-02-27 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2026-01-19 | | | |
| | | Winsloader | [] | win.winsloader | ['Pirate Panda'] | | | | |
| | | Wipbot | ['Epic', 'Tavdig'] | win.wipbot | ['Turla'] | 2024-12-11 | | | |
| | | WMI Ghost | ['Wimmie', 'Syndicasec'] | win.wmighost | ['Thrip'] | 2018-06-22 | | | |
| | | WmRAT | [] | win.wm_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | WndTest | [] | win.wndtest | ['Cleaver'] | 2017-05-21 | | | |
| | | Wonknu | [] | win.wonknu | [] | 2022-07-29 | | | |
| | | woody | [] | win.woody | [] | 2018-04-26 | | | |
| | | Woody RAT | [] | win.woodyrat | [] | 2022-08-05 | | | |
| | | Woolger | ['WoolenLogger'] | win.woolger | ['Rocket Kitten'] | 2022-04-29 | | | |
| | | WORMHOLE | [] | win.wormhole | ['Lazarus Group'] | 2023-08-14 | | | |
| | | WpBruteBot | [] | win.wpbrutebot | [] | 2020-09-23 | | | |
| | | WSCSPL | [] | win.wscspl | ['Dropping Elephant'] | 2022-01-03 | | | |