Sunburst malware family
Sunburst is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-07-31, most recently 2026-08-01. Observed ATT&CK techniques include T1059.001, T1112.
Corpus statistics
- Publicly analyzed samples: 3
- First seen: 2026-07-31
- Last seen: 2026-08-01
- Verdicts: malicious 3
- File types: pe 3
ATT&CK techniques used by Sunburst
Recent Sunburst samples
- 019085a76ba7126fff22770d71bd901c325fc68ac55aa743327984e89f4b0134.exe - malicious (2026-08-01)
- ce77d116a074dab7a22a0fd4f2c1ab475f16eec42e1ded3c0b0aa8211fe858d6 - malicious (2026-07-31)
- 32519b85c0b422e4656de6e6c41878e95fd95026267daab4215ee59c107d6c77.exe - malicious (2026-07-31)
Frequently asked about Sunburst
- What is Sunburst?
- Sunburst is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-07-31, most recently 2026-08-01. Observed ATT&CK techniques include T1059.001, T1112.
- How many Sunburst samples have been analyzed?
- MalwareAnalyzer by Cyble holds 3 publicly analyzed samples attributed to Sunburst, first seen 2026-07-31 and most recently 2026-08-01. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Sunburst use?
- Across our Sunburst samples the most frequently observed techniques are T1059.001 (3), T1112 (2). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Sunburst use?
- Sunburst samples in this corpus are distributed as pe (3).
- Is Sunburst malicious?
- 3 of 3 analyzed Sunburst samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends