Refinka malware family
Refinka is a malware family tracked by MalwareAnalyzer by Cyble across 4 publicly analyzed samples. First seen 2026-08-13, most recently 2026-08-19. Observed ATT&CK techniques include T1055, T1056.001, T1057.
Corpus statistics
- Publicly analyzed samples: 4
- First seen: 2026-08-13
- Last seen: 2026-08-19
- Verdicts: malicious 4
- File types: pe 4
ATT&CK techniques used by Refinka
Extracted command-and-control infrastructure
- 180.101.75.58 - 1 sample
Recent Refinka samples
- virussign.com_a6adf4be5ea33c1edb0c210e2096cef0.vir - malicious (2026-08-19)
- virussign.com_7667724551a7b3fc73105d0677bb3d30.vir - malicious (2026-08-18)
- virussign.com_9be644a06ce1568d245363fe5f742aa0.vir - malicious (2026-08-13)
- virussign.com_e8201e5412b700cd58a26efc1e728310.vir - malicious (2026-08-13)
Frequently asked about Refinka
- What is Refinka?
- Refinka is a malware family tracked by MalwareAnalyzer by Cyble across 4 publicly analyzed samples. First seen 2026-08-13, most recently 2026-08-19. Observed ATT&CK techniques include T1055, T1056.001, T1057.
- How many Refinka samples have been analyzed?
- MalwareAnalyzer by Cyble holds 4 publicly analyzed samples attributed to Refinka, first seen 2026-08-13 and most recently 2026-08-19. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Refinka use?
- Across our Refinka samples the most frequently observed techniques are T1055 (4), T1056.001 (4), T1057 (4). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Refinka use?
- Refinka samples in this corpus are distributed as pe (4).
- Does Refinka use command-and-control infrastructure?
- Yes. 1 distinct command-and-control indicator has been extracted from Refinka samples, either from static configuration or from traffic captured during sandbox detonation. The full list is published on the family page.
- Is Refinka malicious?
- 4 of 4 analyzed Refinka samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends