T1562.001 in real malware
ATT&CK technique T1562.001 appears in 47 publicly analyzed samples on MalwareAnalyzer by Cyble, 0.0% of the analyzed corpus. Seven-day prevalence is rising (46 recent vs 0 prior). Most associated families: Fileinfector, Juko, Barys, HUILoader, Alien.
Prevalence in the corpus
- Samples exhibiting T1562.001: 47
- Share of analyzed corpus: 0.0%
- Last 7 days: 46 · prior 7 days: 0 (rising)
Malware families using T1562.001
- Fileinfector - 9 samples
- Juko - 9 samples
- Barys - 3 samples
- HUILoader - 2 samples
- Alien - 1 sample
Example samples
- e1267ac21ecbf34f7601c33b7b60c840fc459e3de54a8db2568c227ee340cb87 - malicious
- ffc48dea7fbd3a9fdb4cd6b5f4b3436f04c30fc7603d8bdfd7f27fe4c554ea75 - malicious
- virussign.com_4455c7c75202decbf07bf724f5b1ea50.vir - malicious
- bb8db1a5f16af7b28037d1ac71260019b7b8fa07c0d5d32ce11b97054bd80c81 - malicious
- ff4bc4e5404cf64b4fa06f5764c980dd9ca7be7a041dd7a7ae1f4e59f498676a - malicious
- 4b4a89d15c8b8a558f52b8c07f93273200fbbb3173173d96f45f8d424a197653 - malicious
- 770ce29036a44d72ff33ae394de5d19fe8399a900e1fa45150231df954cc55e5 - malicious
- 4a9f8a9ff551edd0fc7ad74656ddbd6ce800a74e6b775c6936092edc2b2a0782 - malicious
- 2fd3f4ee1525f6e5a59a546ca3140dbd25cb83fdc4f2e1c505ab0ad856ef7b3b - malicious
- c0c42934680fa49a0b2903402c702330fb824b0e752c38bb61654fe8f074b337 - malicious
- afa5fa3035047aa871d5155369cee03c353a3ed8dfe24fa5c315a0ffc7e0765d - malicious
- 9a7c82869d5bbec096b2e62944fe042032733788969c9eb3c5585c287b99b612 - malicious
- 24a2dbe612c93adf6c4836a0401fe7da5a74f9c77d9c17bb790deddd17f619b2 - malicious
- 1294bcc0aad6e4319ed471b44a6fbb98b3de3193adc2812cc9a2b47baadf8497 - malicious
- 06225c0f5823a7c387a574a76ec3ae35f95937436e3ca125e7b1b440daa049ef - malicious
- caf70afc2af8b68d776a3790f6f7e8acc044b0d49ebde8ff66f5826a5ba068cd - malicious
- 90fd93c66653e1a0615306511a39d1891069e68a3bd55de98e63d797b5813786 - malicious
- 84197442007fedac54e316e73460bcccad898cbe1b6d0e6bdc2a92bf38d6fb39 - malicious
- d64913aa3ea5cc29321718d74bedb17cf2320c66bbf65e5f63cffc3128451c69 - malicious
- 1dad207c4d8680b8b165e299757ebf5831a9e6be44027e895604b9121a91f3ba - malicious
- 8c3435c87304c6189dc8fd839867edb9cca804fbe07ae9db2b92563ee9c498ca - malicious
- 7d18fff7b88f96be68f4862a87ab6991f5163ea2893d94f85b27e58504c3015d - malicious
- 114efb67a288e4a0b857b7fa9dcf90f8e0397dc947cc49d3507f2d7a48ee452e - malicious
- a120bb56775bd34337709b59a91c7a28c4b7dd9a158fb4162a8a0366a6b8cc98 - malicious
- 1c2eea65e6495498ebdbcbafd592ece5323e0938439da09312347f506f575519 - malicious
Frequently asked about T1562.001
- How common is ATT&CK T1562.001 in real malware?
- ATT&CK technique T1562.001 appears in 47 publicly analyzed samples on MalwareAnalyzer by Cyble, 0.0% of the analyzed corpus. Seven-day prevalence is rising (46 recent vs 0 prior). Most associated families: Fileinfector, Juko, Barys, HUILoader, Alien.
- Is T1562.001 becoming more common?
- Prevalence is rising: 46 samples in the last seven days against 0 in the seven days before. This measures submissions to MalwareAnalyzer by Cyble, so it reflects what is being submitted here rather than global attacker behaviour.
- Which malware families use T1562.001?
- In this corpus T1562.001 is most associated with Fileinfector (9), Juko (9), Barys (3), HUILoader (2), Alien (1). Counts are analyzed samples per family in which the technique was observed.
- What share of analyzed samples use T1562.001?
- 0.0% of the publicly analyzed corpus (47 of 100981 samples) exhibits T1562.001. Technique attribution comes from behavior captured during real sandbox detonation and from static analysis, not from a vendor label.
All ATT&CK techniques in the corpus · Latest analyzed threats