MSShellcode malware family
MSShellcode is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-22, most recently 2026-08-23.
Corpus statistics
- Publicly analyzed samples: 2
- First seen: 2026-08-22
- Last seen: 2026-08-23
- Verdicts: malicious 2
- File types: pe 2
Extracted command-and-control infrastructure
- http://www.zeustech.net/ - 1 sample
Recent MSShellcode samples
- 7db14bfcd4ef55c7ba177e25aacd7a74c93de5420d50be1d1cc19bb13a9e24b5 - malicious (2026-08-23)
- 78572df61ea18c426faa9cf087676a1ab7a093bec89fa41ecedbe732416dca56 - malicious (2026-08-22)
Frequently asked about MSShellcode
- What is MSShellcode?
- MSShellcode is a malware family tracked by MalwareAnalyzer by Cyble across 2 publicly analyzed samples. First seen 2026-08-22, most recently 2026-08-23.
- How many MSShellcode samples have been analyzed?
- MalwareAnalyzer by Cyble holds 2 publicly analyzed samples attributed to MSShellcode, first seen 2026-08-22 and most recently 2026-08-23. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What file types does MSShellcode use?
- MSShellcode samples in this corpus are distributed as pe (2).
- Does MSShellcode use command-and-control infrastructure?
- Yes. 1 distinct command-and-control indicator has been extracted from MSShellcode samples, either from static configuration or from traffic captured during sandbox detonation. The full list is published on the family page.
- Is MSShellcode malicious?
- 2 of 2 analyzed MSShellcode samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends