UNOFFICIAL malware family
UNOFFICIAL is a malware family tracked by MalwareAnalyzer by Cyble across 17 publicly analyzed samples. First seen 2026-07-25, most recently 2026-07-28. Observed ATT&CK techniques include T1071.001.
Corpus statistics
- Publicly analyzed samples: 17
- First seen: 2026-07-25
- Last seen: 2026-07-28
- Verdicts: malicious 17
- File types: unknown 16, zip 1
ATT&CK techniques used by UNOFFICIAL
- T1071.001 - 1 sample
Recent UNOFFICIAL samples
- virussign.com_fd1b1dd7d2e08e138e65a8879680d000.vir - malicious (2026-07-28)
- Parity_Boot_B_BOOT.IMA - malicious (2026-07-26)
- Nyb_Boot.ima - malicious (2026-07-26)
- Kampana(A)_BOOT.IMA - malicious (2026-07-26)
- INTC_BOOT.IMA - malicious (2026-07-26)
- Form_A_BOOT.IMA - malicious (2026-07-26)
- Friday_the_13th.540.A.com - malicious (2026-07-26)
- Friday_the_13th.416.A.com - malicious (2026-07-26)
- Friday_the_13th.408.com - malicious (2026-07-26)
- FORMAT.COM - malicious (2026-07-25)
- I-Worm.Nimda.zip - malicious (2026-07-25)
- SheHas_BOOT.IMA - malicious (2026-07-25)
- Sampo_BOOT.IMA - malicious (2026-07-25)
- Quax_A_BOOT.IMA - malicious (2026-07-25)
- Jumper_BOOT.IMA - malicious (2026-07-25)
- X21 - malicious (2026-07-25)
- SNOOPY - malicious (2026-07-25)
Frequently asked about UNOFFICIAL
- What is UNOFFICIAL?
- UNOFFICIAL is a malware family tracked by MalwareAnalyzer by Cyble across 17 publicly analyzed samples. First seen 2026-07-25, most recently 2026-07-28. Observed ATT&CK techniques include T1071.001.
- How many UNOFFICIAL samples have been analyzed?
- MalwareAnalyzer by Cyble holds 17 publicly analyzed samples attributed to UNOFFICIAL, first seen 2026-07-25 and most recently 2026-07-28. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does UNOFFICIAL use?
- Across our UNOFFICIAL samples the most frequently observed techniques are T1071.001 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does UNOFFICIAL use?
- UNOFFICIAL samples in this corpus are distributed as unknown (16), zip (1).
- Is UNOFFICIAL malicious?
- 17 of 17 analyzed UNOFFICIAL samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends