Virut malware family
Virut is a malware family tracked by MalwareAnalyzer by Cyble across 5 publicly analyzed samples. First seen 2026-08-01, most recently 2026-08-23. Observed ATT&CK techniques include T1056.001.
Corpus statistics
- Publicly analyzed samples: 5
- First seen: 2026-08-01
- Last seen: 2026-08-23
- Verdicts: malicious 4, suspicious 1
- File types: pe 5
ATT&CK techniques used by Virut
- T1056.001 - 1 sample
Recent Virut samples
- 1dbcbbc209a9f817ae64ee59aa99329c78869704f3eb63c2ee014f5a0d11f1d7 - malicious (2026-08-23)
- 1dde02baeac21749ecd60e5076b804396b66c64bea885eef10c91df54c41a9e8 - malicious (2026-08-21)
- virussign.com_53333d0a14220bab1127779b73c45eb0.vir - malicious (2026-08-13)
- 82a0d00f3da7be4ac9eff2e5b165f06763f07e66cecc10d933d7848746e3ef3d - suspicious (2026-08-13)
- virussign.com_3be3129b3c041c88a7ee71f816132520.vir - malicious (2026-08-01)
Frequently asked about Virut
- What is Virut?
- Virut is a malware family tracked by MalwareAnalyzer by Cyble across 5 publicly analyzed samples. First seen 2026-08-01, most recently 2026-08-23. Observed ATT&CK techniques include T1056.001.
- How many Virut samples have been analyzed?
- MalwareAnalyzer by Cyble holds 5 publicly analyzed samples attributed to Virut, first seen 2026-08-01 and most recently 2026-08-23. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Virut use?
- Across our Virut samples the most frequently observed techniques are T1056.001 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Virut use?
- Virut samples in this corpus are distributed as pe (5).
- Is Virut malicious?
- 4 of 5 analyzed Virut samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends