FREE THREAT INTELLIGENCE SAMPLE

A preview of the full feed.

Explore a small selection of our intelligence: up to 50 events per daily sample, free to view and download. Request an API key for full feed access.

Download JSON Export CSV

50 eventsSample date 2026-10-08Published 2026-10-08 22:36:34 UTC

Inside the sample

Time (UTC)	Action	Indicator	Context	Analysis
10-08 00:00:13	upsert	FILE`91e2ace35426e99f4a9be60206558ddd4073e74056e2a3633b2983ee6a680820`	obfscred	malicioushigh
10-08 00:00:13	upsert	FILE`f2ff7a813c7c39c6ddaa27605f665a813b0bdf642a7f28ee83cf41be0419c476`	mirai	malicioushigh
10-08 00:00:15	upsert	FILE`4967c7a64422e63f347eefbcbd946cc1fc23a0e0d5082520c2640931e4ae2367`	cryxos	malicioushigh
10-08 00:00:15	upsert	FILE`904c84640dbce64782c509e9052f813ae3308a18d49640920ea1e80ccd900313`	msil	malicioushigh
10-08 00:00:17	upsert	FILE`75089643812dd530fa41cf1217823912c96898465935de32745ac268037cd9a4`	cryxos	malicioushigh
10-08 00:00:18	upsert	FILE`609489cf4e8792136c1f5bc9f18d1dc005a41f531667a1c1707c63e34ba23607`	zusy	malicioushigh
10-08 00:00:19	upsert	FILE`efb20d40f634a00381b5ac0e68a810391ff28ea6e0103749d229d40d5de46eb5`	vevi	malicioushigh
10-08 00:00:19	upsert	IP`104.21.2.151`	recur	maliciousmedium
10-08 00:00:19	upsert	IP`172.67.129.85`	recur	maliciousmedium
10-08 00:00:20	upsert	FILE`da90f828d7617afb6f8cf1149d8f7fd9cfa9155777df884762ebb435ba79defd`	obfscred	malicioushigh
10-08 00:00:20	upsert	FILE`c6b5ad33ea24fc34a4601fa4a9c4bb819fe7b0a57cdc923cd62974c5c3273f21`	obfscred	malicioushigh
10-08 00:00:20	upsert	FILE`84acad9668cccf14aab96df1915c381e4ecf0dc632b23eed36538724386d0f3e`	padodor	malicioushigh
10-08 00:00:20	upsert	FILE`db61727412fbb611be3830af87a7bcb89200ce5ffa4d4add9c28cb6c45ed683b`	padodor	malicioushigh
10-08 00:00:20	upsert	FILE`23f87bc856d373938cff1c40a82f3bdc4c0ff3de52043e43691224a9ad187435`	zusy	malicioushigh
10-08 00:00:20	upsert	FILE`979a67b763ab9d7b646eacb1b246acd9f518d4f2cdf82a0a4fa32228830ed0af`	cryxos	malicioushigh
10-08 00:00:21	upsert	URL`http://107.172.206.125/129/seethebestthings.js`	—	maliciouslow
10-08 00:00:21	upsert	URL`http://107.172.206.125/httpswww.siemens-energy.comglobalenhomeproducts-servicessolutions-usecasebiomass-to-power.html.IMG/`	—	maliciouslow
10-08 00:00:21	upsert	URL`http://107.172.206.125/129/xcv.htA?picture.Jpg`	—	maliciouslow
10-08 00:00:21	upsert	URL`https://duakale.me/h8wT9M`	—	maliciouslow
10-08 00:00:21	upsert	FILE`721c27097891dd6aef79b379421acefe105e578b1db69ef0fb5b1546c86378dd`	copak	maliciouscritical
10-08 00:00:22	upsert	FILE`07c88f6c59c4bdb656ba14584a6620adcf096897c70f8884e74424981ba82612`	powershell	malicioushigh
10-08 00:00:23	upsert	FILE`517d0d5a37d34dfc883a7845b1a57df3b23773b44585479450ec33aaf15ac18f`	stop	maliciouscritical
10-08 00:00:24	upsert	FILE`539e2203ae08b4a9001531cf58e248d9ea598beab405db563deb09bd4ba0f93a`	emotet	maliciouscritical
10-08 00:00:25	upsert	FILE`c1036e6afa0daa70d899a0455d1d45bf149b4267594575a190aafccdd9bc6e98`	obfscred	malicioushigh
10-08 00:00:26	upsert	FILE`66d1cd9c7b450c9d6ca0dcfd891357c8d66f99f79eb851c8868afb1e136277af`	sality	malicioushigh
10-08 00:00:26	upsert	FILE`47222097f3f9c89467b0dc4d1c12e7152e2e012ae4f94c84fb772e2bee8fb668`	blackmoon	malicioushigh
10-08 00:00:26	upsert	FILE`06f624550ac51fbde1d3da97ec348b42eba5186237a21c5b8820924c3a53e305`	powershell	malicioushigh
10-08 00:00:27	upsert	FILE`18ab16e9c40bfb8e7c54acf251055eb2517110329e6be4ca1f3e475da0d7bea8`	cerbu	malicioushigh
10-08 00:00:27	upsert	FILE`8d45294ec57a27ab2cdd0afae1b9235ccd740d6ad7628c9cdd563538702506bb`	zusy	malicioushigh
10-08 00:00:27	upsert	FILE`75427bc71371b8664323df034278815ee38b6d6800ec58bbe7f738f43ce5aa9a`	vilsel	malicioushigh
10-08 00:00:28	upsert	FILE`8b4241ae48a604ddef1775815ba9c2efcf148dfbf2b2ee45ae3ec223491103b2`	acsogenixx	malicioushigh
10-08 00:00:28	upsert	FILE`56a5e3b16b201f61093d63da463eb838d4057cac815a704190b084607f0596fd`	powershell	malicioushigh
10-08 00:00:28	upsert	FILE`68cf2c6ae25b0785e75add3cce95eb290b9ff65c941ed099055822e725f72378`	comet	malicioushigh
10-08 00:00:28	upsert	FILE`f79081af699355a6f370e643a16eb0c1de3521be4ab05eb26f8604bd54b126c5`	comet	malicioushigh
10-08 00:00:29	upsert	FILE`2c9bf3cc17668f3428595c15cac6419d64bcae4d60d455a10f00183e78032299`	zusy	malicioushigh
10-08 00:00:29	upsert	FILE`5ecb11ff2789e06e8b3c814e7d08216164934c2df95be93256042415c85598dc`	popuper	malicioushigh
10-08 00:00:29	upsert	URL`http://best-targeted-traffic.com/install.php?unq=20i72663937xgujyuj&version=0&pais=Unknown`	—	malicioushigh
10-08 00:00:30	upsert	FILE`47fa138348a519c96b0786cce7fa92d803d3b37bf05075e36b2eb6fb75566ccd`	zusy	malicioushigh
10-08 00:00:30	upsert	FILE`43b386d82e1e4ff1bda044c516317fc5ef9755211a0b3c941445459e5a78b406`	cyzt	malicioushigh
10-08 00:00:30	upsert	FILE`c15c4989cdbbf1c446dd136e3071bdac38e5b5d23312f433b1f4caeff117beb0`	obfscred	malicioushigh
10-08 00:00:31	upsert	FILE`2462ba0b94c4ba810802ad4e43918bf1a7546f48ebf950cac4c8e55636170e19`	offloader · con_up	malicioushigh
10-08 00:00:31	upsert	FILE`c9252acb9499392d3165811d1e83e1ac69bc2b808ced49527bbb7c21633c9ff3`	baidence	malicioushigh
10-08 00:00:31	upsert	FILE`e0f9ee26347302dbf432de0270df5c358fd2d489a56ab7296b827ca60130c268`	misc	maliciouscritical
10-08 00:00:32	upsert	FILE`8c4b9a5d9cd39e490c4629416bcdc5deedca8a80fba9964dc19fda90727e714f`	farfli	malicioushigh
10-08 00:00:32	upsert	FILE`1013553494979cbffb19410b096024b1334145e140ba4ea7b74079dadca06d12`	cerbu	malicioushigh
10-08 00:00:32	upsert	FILE`50bdb709b91c3316f9a6b94c471bb4b4030b9333b37993f8ba303b7525b09899`	zusy	malicioushigh
10-08 00:00:33	upsert	FILE`2ca7412a926eaa9461387eafab3fca46db1661fdbd007626cb2dd88055552418`	lazy	malicioushigh
10-08 00:00:33	upsert	FILE`5cda4940d1b381afb3935f7df50b8834c5a7784e4fedd8aa3759cc7bdf1fc3fd`	zusy	malicioushigh
10-08 00:00:33	upsert	FILE`71f51431fcdf86ac0118efc947beabf69bbd2b759ede1275e25fe8c4a4d7e23e`	copak	maliciouscritical
10-08 00:00:33	upsert	FILE`c6b3b48870296182fcf402e86e694f890c633e68f3f0ecfc09c3e70d6512ab13`	msil	malicioushigh

View an event as JSON

JSON · first event

{
  "action": "upsert",
  "analysis": {
    "confidence": 100,
    "family": "obfscred",
    "malicious": true,
    "risk_score": 80,
    "severity": "high"
  },
  "id": "event--c273ce0c-a618-5ea5-9192-fcc2072243d3",
  "indicator": {
    "links": {
      "self": "https://api.virussign.com/v1/ioc/files/91e2ace35426e99f4a9be60206558ddd4073e74056e2a3633b2983ee6a680820"
    },
    "md5": "a4d420349d6584b39b5576e88e6ff8c1",
    "sha1": "fd65f3747819d278ef7618c76cfdd17c7404dae3",
    "sha256": "91e2ace35426e99f4a9be60206558ddd4073e74056e2a3633b2983ee6a680820",
    "type": "file",
    "value": "91e2ace35426e99f4a9be60206558ddd4073e74056e2a3633b2983ee6a680820"
  },
  "tags": [
    "contains-embedded-js",
    "gen2",
    "html",
    "internet",
    "jsfiretruck",
    "obfscred",
    "phishing",
    "trojan",
    "wacatac",
    "windows"
  ],
  "timestamp": "2026-10-08T00:00:13Z",
  "validity": {
    "first_seen": "2026-10-07T14:50:32Z",
    "last_seen": "2026-10-08T00:00:12Z"
  }
}

Browse available samples from the past seven days. Each contains selected feed events for evaluation. JSON preserves the API event structure; CSV uses field paths for nested objects and JSON for arrays.

KEEP YOUR INTELLIGENCE CURRENT

Build beyond the sample.

Request an API key to access the full feed, with ongoing updates and richer context for your workflow. Samples are provided under our Terms of Use.

Request full access Feed docs →

Files are hashed locally in your browser and never uploaded. Only the SHA-256 is sent for lookup. Standard query quota applies.