Shufab malware family
Shufab is a malware family tracked by MalwareAnalyzer by Cyble across 7 publicly analyzed samples. First seen 2026-07-25, most recently 2026-07-25. Observed ATT&CK techniques include T1112, T1543.003.
Corpus statistics
- Publicly analyzed samples: 7
- First seen: 2026-07-25
- Last seen: 2026-07-25
- Verdicts: malicious 7
- File types: pe 7
ATT&CK techniques used by Shufab
Recent Shufab samples
- agenttesla-mem3.exe - malicious (2026-07-25)
- agenttesla-mem2.exe - malicious (2026-07-25)
- agenttesla-memtest.exe - malicious (2026-07-25)
- AT-consistency-4.exe - malicious (2026-07-25)
- AT-consistency-3.exe - malicious (2026-07-25)
- AT-consistency-2.exe - malicious (2026-07-25)
- AT-consistency-1.exe - malicious (2026-07-25)
Frequently asked about Shufab
- What is Shufab?
- Shufab is a malware family tracked by MalwareAnalyzer by Cyble across 7 publicly analyzed samples. First seen 2026-07-25, most recently 2026-07-25. Observed ATT&CK techniques include T1112, T1543.003.
- How many Shufab samples have been analyzed?
- MalwareAnalyzer by Cyble holds 7 publicly analyzed samples attributed to Shufab, first seen 2026-07-25 and most recently 2026-07-25. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Shufab use?
- Across our Shufab samples the most frequently observed techniques are T1112 (7), T1543.003 (7). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Shufab use?
- Shufab samples in this corpus are distributed as pe (7).
- Is Shufab malicious?
- 7 of 7 analyzed Shufab samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends