IRCbot malware family
IRCbot is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-07-31, most recently 2026-08-20. Observed ATT&CK techniques include T1112.
Corpus statistics
- Publicly analyzed samples: 2
- First seen: 2026-07-31
- Last seen: 2026-08-20
- Verdicts: malicious 2
- File types: pe 2
ATT&CK techniques used by IRCbot
- T1112 - 2 samples
Recent IRCbot samples
- 941aa5800fada925a3e685567faf4478b59537328384f403d2e6f8c229b016ae - malicious (2026-08-20)
- Build.exe - malicious (2026-07-31)
Frequently asked about IRCbot
- What is IRCbot?
- IRCbot is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-07-31, most recently 2026-08-20. Observed ATT&CK techniques include T1112.
- How many IRCbot samples have been analyzed?
- MalwareAnalyzer by Cyble holds 2 publicly analyzed samples attributed to IRCbot, first seen 2026-07-31 and most recently 2026-08-20. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does IRCbot use?
- Across our IRCbot samples the most frequently observed techniques are T1112 (2). Counts are the number of analyzed samples in which each technique was observed.
- What file types does IRCbot use?
- IRCbot samples in this corpus are distributed as pe (2).
- Is IRCbot malicious?
- 2 of 2 analyzed IRCbot samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends