Cutwail malware family
Cutwail is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-07-31, most recently 2026-08-11. Observed ATT&CK techniques include T1055, T1112, T1547.001.
Corpus statistics
- Publicly analyzed samples: 3
- First seen: 2026-07-31
- Last seen: 2026-08-11
- Verdicts: malicious 3
- File types: pe 3
ATT&CK techniques used by Cutwail
Recent Cutwail samples
- 1ccd748d2e0b0f58198fa065f0a6b3c7029ae93370c6904288b61a36902b8555 - malicious (2026-08-11)
- 774_Win32.Cutwail.bin - malicious (2026-07-31)
- unpacked_.safe - malicious (2026-07-31)
Frequently asked about Cutwail
- What is Cutwail?
- Cutwail is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-07-31, most recently 2026-08-11. Observed ATT&CK techniques include T1055, T1112, T1547.001.
- How many Cutwail samples have been analyzed?
- MalwareAnalyzer by Cyble holds 3 publicly analyzed samples attributed to Cutwail, first seen 2026-07-31 and most recently 2026-08-11. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Cutwail use?
- Across our Cutwail samples the most frequently observed techniques are T1055 (1), T1112 (1), T1547.001 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Cutwail use?
- Cutwail samples in this corpus are distributed as pe (3).
- Is Cutwail malicious?
- 3 of 3 analyzed Cutwail samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends