Winsecsrv malware family
Winsecsrv is a malware family tracked by MalwareAnalyzer by Cyble across 1 publicly analyzed sample. First seen 2026-08-22, most recently 2026-08-22. Observed ATT&CK techniques include T1003, T1555.
Corpus statistics
- Publicly analyzed samples: 1
- First seen: 2026-08-22
- Last seen: 2026-08-22
- Verdicts: malicious 1
- File types: pe 1
ATT&CK techniques used by Winsecsrv
Recent Winsecsrv samples
- 59cb3fb94fca66c3e2d0b88af5dadd80f7d4596e3f9760d6c549d4fb9252d0f6 - malicious (2026-08-22)
Frequently asked about Winsecsrv
- What is Winsecsrv?
- Winsecsrv is a malware family tracked by MalwareAnalyzer by Cyble across 1 publicly analyzed sample. First seen 2026-08-22, most recently 2026-08-22. Observed ATT&CK techniques include T1003, T1555.
- How many Winsecsrv samples have been analyzed?
- MalwareAnalyzer by Cyble holds 1 publicly analyzed sample attributed to Winsecsrv, first seen 2026-08-22 and most recently 2026-08-22. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Winsecsrv use?
- Across our Winsecsrv samples the most frequently observed techniques are T1003 (1), T1555 (1). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Winsecsrv use?
- Winsecsrv samples in this corpus are distributed as pe (1).
- Is Winsecsrv malicious?
- 1 of 1 analyzed Winsecsrv sample was scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends