Duqu malware family
Duqu is a malware family tracked by MalwareAnalyzer by Cyble across 5 publicly analyzed samples. First seen 2026-07-31, most recently 2026-07-31. Observed ATT&CK techniques include T1112.
Corpus statistics
- Publicly analyzed samples: 5
- First seen: 2026-07-31
- Last seen: 2026-07-31
- Verdicts: malicious 5
- File types: pe 5
ATT&CK techniques used by Duqu
- T1112 - 4 samples
Recent Duqu samples
- win32.exe - malicious (2026-07-31)
- 058_Duqu2.bin - malicious (2026-07-31)
- 049_Duqu2.bin - malicious (2026-07-31)
- 047_Duqu2.bin - malicious (2026-07-31)
- 045_Duqu2.bin - malicious (2026-07-31)
Frequently asked about Duqu
- What is Duqu?
- Duqu is a malware family tracked by MalwareAnalyzer by Cyble across 5 publicly analyzed samples. First seen 2026-07-31, most recently 2026-07-31. Observed ATT&CK techniques include T1112.
- How many Duqu samples have been analyzed?
- MalwareAnalyzer by Cyble holds 5 publicly analyzed samples attributed to Duqu, first seen 2026-07-31 and most recently 2026-07-31. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Duqu use?
- Across our Duqu samples the most frequently observed techniques are T1112 (4). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Duqu use?
- Duqu samples in this corpus are distributed as pe (5).
- Is Duqu malicious?
- 5 of 5 analyzed Duqu samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends