Bublik malware family
Bublik is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-13, most recently 2026-08-20. Observed ATT&CK techniques include T1105, T1112, T1543.003.
Corpus statistics
- Publicly analyzed samples: 2
- First seen: 2026-08-13
- Last seen: 2026-08-20
- Verdicts: malicious 2
- File types: pe 2
ATT&CK techniques used by Bublik
Recent Bublik samples
- 238a2591f8f443e1523d536a10dd42ee2315fb2f1cd3108c9992f8a46ab8286d - malicious (2026-08-20)
- 51925a1dfaa5278f9c60dd814c925d087c90f21b8be570d86c8f0685b806ab66 - malicious (2026-08-13)
Frequently asked about Bublik
- What is Bublik?
- Bublik is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-13, most recently 2026-08-20. Observed ATT&CK techniques include T1105, T1112, T1543.003.
- How many Bublik samples have been analyzed?
- MalwareAnalyzer by Cyble holds 2 publicly analyzed samples attributed to Bublik, first seen 2026-08-13 and most recently 2026-08-20. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Bublik use?
- Across our Bublik samples the most frequently observed techniques are T1105 (1), T1112 (1), T1543.003 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Bublik use?
- Bublik samples in this corpus are distributed as pe (2).
- Is Bublik malicious?
- 2 of 2 analyzed Bublik samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends