Phoenix malware family
Phoenix is a malware family tracked by MalwareAnalyzer by Cyble across 1 publicly analyzed sample. First seen 2026-07-31, most recently 2026-07-31.
Corpus statistics
- Publicly analyzed samples: 1
- First seen: 2026-07-31
- Last seen: 2026-07-31
- Verdicts: malicious 1
- File types: pe 1
Recent Phoenix samples
- TOKYO_1258.EXE - malicious (2026-07-31)
Frequently asked about Phoenix
- What is Phoenix?
- Phoenix is a malware family tracked by MalwareAnalyzer by Cyble across 1 publicly analyzed sample. First seen 2026-07-31, most recently 2026-07-31.
- How many Phoenix samples have been analyzed?
- MalwareAnalyzer by Cyble holds 1 publicly analyzed sample attributed to Phoenix, first seen 2026-07-31 and most recently 2026-07-31. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What file types does Phoenix use?
- Phoenix samples in this corpus are distributed as pe (1).
- Is Phoenix malicious?
- 1 of 1 analyzed Phoenix sample was scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends