Rahiwi malware family
Rahiwi is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-08, most recently 2026-08-09.
Corpus statistics
- Publicly analyzed samples: 3
- First seen: 2026-08-08
- Last seen: 2026-08-09
- Verdicts: malicious 3
- File types: pe 3
Recent Rahiwi samples
- 655b44d8c0fe5e162fc4948570c26c82981ae922b6614106af6a0cab5dca734b - malicious (2026-08-09)
- d42318d0d3feaf209ef8c071dba2c4a4a5b5b93324f8c39cb24d25cfeb74682c - malicious (2026-08-09)
- 5d035ab821ed72322fb6f195483adf069fcaa41a17c19bfdbcf577fc11071d5f - malicious (2026-08-08)
Frequently asked about Rahiwi
- What is Rahiwi?
- Rahiwi is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-08, most recently 2026-08-09.
- How many Rahiwi samples have been analyzed?
- MalwareAnalyzer by Cyble holds 3 publicly analyzed samples attributed to Rahiwi, first seen 2026-08-08 and most recently 2026-08-09. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What file types does Rahiwi use?
- Rahiwi samples in this corpus are distributed as pe (3).
- Is Rahiwi malicious?
- 3 of 3 analyzed Rahiwi samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends