FREE THREAT INTELLIGENCE SAMPLE

A preview of the full feed.

Explore a small selection of our intelligence: up to 50 events per daily sample, free to view and download. Request an API key for full feed access.

Download JSON Export CSV

50 eventsSample date 2026-10-09Published 2026-10-09 01:38:04 UTC

Inside the sample

Time (UTC)	Action	Indicator	Context	Analysis
10-09 00:00:00	upsert	FILE`7844becb4970bced0e5959968062ba88a0b18693857d1024f3cf70c9e2d2e00d`	symmi	malicioushigh
10-09 00:00:00	upsert	FILE`3d9526d0bdb7cc8a19abdbc10ad0d5476b3cd95bf92aac63d4f267812bb280f0`	shell	malicioushigh
10-09 00:00:00	upsert	FILE`78738a336bdb7c884ee5eb63c0ea9302ddf0c5351dd529a8b391377c7171f02f`	msil	malicioushigh
10-09 00:00:00	upsert	FILE`7873fcc0767efde04594296fbdaeb0c42eec371fcfefb8dfd052ff68fc85694a`	multiplug	malicioushigh
10-09 00:00:00	upsert	FILE`78d390316afdd752af4ac8648ef90a51329291c2c13f80509c4163b9bab177bf`	msil · sev_down	malicioushigh
10-09 00:00:00	upsert	FILE`78df08a5b8edc064ef17142080cd14b8ca0271653188c2bd023cbbb35f79d960`	binder	maliciouscritical
10-09 00:00:00	upsert	FILE`790a69f9920bece688b6d354568648c7430c7d727d29a099314b01c0a7e4933b`	hesv	malicioushigh
10-09 00:00:00	upsert	FILE`791a4078b021bf52eff9147bcf7becb72fb3800e6cf49736f98a68f1dc245548`	jalapeno	maliciouscritical
10-09 00:00:00	upsert	FILE`a90c56c90b27ccfe3543db2fcbebafcb38debb75bcbf1d342a1f3c767ee180fd`	bulz	malicioushigh
10-09 00:00:00	upsert	FILE`a930168f06a39df8425afd8125facee53bee201259357028666111033b8d806c`	bulz	malicioushigh
10-09 00:00:00	upsert	FILE`adae064487c8df5ecc5f31d70c4bd315c863076d052e74bf94dd9d8af4777f18`	vittalia	malicioushigh
10-09 00:00:00	upsert	FILE`adb462e90b0b6867d23b05a9a669dacf6a31dc060d42b7cdcd05d25290f1ccc0`	vittalia	malicioushigh
10-09 00:00:00	upsert	FILE`adb92849c86bd33b541940cd105fa4fa1a4a3c56dbe788bc24925bc3743dd20d`	vittalia	malicioushigh
10-09 00:00:00	upsert	FILE`129704616dda0dca06fbb3115b4d2534651159cf16f5edaa57464e1b99b82f11`	—	malicioushigh
10-09 00:00:00	upsert	FILE`1047282ae269eebf84c607fe26748557409b0904b144c17502b69a44e4936eba`	hjqbs	malicioushigh
10-09 00:00:00	upsert	FILE`10481a94ca99d4d6a38dd2915c105a0675707bf0b0209b8fa2246842990e4ad7`	—	maliciouslow
10-09 00:00:00	upsert	FILE`270a4a48159056c606c658f090dd95ddac9a839377579800fac4fdef01850300`	—	maliciouslow
10-09 00:00:00	upsert	FILE`1d4f7785546e81d3fc5b309a727b42f688e8d3392650b330df94e3db11e8ba40`	encpk	malicioushigh
10-09 00:00:00	upsert	FILE`96740876b23e56232d63160e67b0c43f20e22de1df98211d0c892c7503437094`	—	maliciousmedium
10-09 00:00:00	upsert	FILE`270dffe1db819968e3e0182dd83e884fa21d1a228e0c4fc5db072cea41ef66d5`	darkkomet	maliciouscritical
10-09 00:00:00	upsert	FILE`96788e7d133e2303f1b12c83b86af0a853ce00a6636019b8d8779ed38b415482`	—	malicioushigh
10-09 00:00:00	upsert	FILE`79bdb0142d52b14ecdf811a9c083ac9c2356efa41675e5c057e899caa2d270a1`	crack	malicioushigh
10-09 00:00:00	upsert	FILE`96831b0ea4cef3f42ae4de7bd78cc1cff416575912983d5a720e23e09dff32af`	—	maliciousmedium
10-09 00:00:00	upsert	FILE`79bf7504e0ce239e3943a731098bcbf3032c7227aacd83b7dfa1b25f553016da`	agentb	malicioushigh
10-09 00:00:00	upsert	FILE`79c7fe397c2636343fa00d47e8e55b37ce4515625c4037817efcafa53677a31f`	crack	malicioushigh
10-09 00:00:00	upsert	FILE`3006a23b8ec691b280bfcb100f004977f3301bf61d7aeaa0556c26d1f8d9277c`	—	malicioushigh
10-09 00:00:00	upsert	FILE`79cd43e0d9b9ace58b36b9a512776ad93b94f6f967018de102abfc73468f7d49`	crack	malicioushigh
10-09 00:00:00	upsert	FILE`860df6fc56819148b6461f304d24ecfc0b6ffd6eb1a7e703049cffb27f7866ec`	wacatac	malicioushigh
10-09 00:00:00	upsert	FILE`30099dd0ab20c83cafdaae7898ad3a1a69668bc6b28a8b26a9984d5e7dd89d08`	—	malicioushigh
10-09 00:00:00	upsert	FILE`86757711973954c8a498bb3007b1e2ae4d70cbe89f63816f1da6625246c2106c`	pasnaino	maliciouscritical
10-09 00:00:00	upsert	FILE`79dadc0a452d662493edf8f2a0216178570cb5506c76e10d9179fcd00f113ab9`	cryxos	malicioushigh
10-09 00:00:00	upsert	FILE`86bbff32b664de340e2d1c0b2818a0d9f3eaf8205dc3a20ba69c62e4f5e01286`	msil	maliciouscritical
10-09 00:00:00	upsert	FILE`767950017f688ff9f218273f7b05468ec98022759f7f899a60d6d17b95cc5a3c`	—	maliciouslow
10-09 00:00:00	upsert	FILE`7739e92e478a57e56570ee77f567b6ff30bc1d0ca73e5b3fd874f3d3b326b89c`	defendercontrol	malicioushigh
10-09 00:00:00	upsert	FILE`79196d42773b397e2f8d3db2e8f13eae95fd27df54d24576e0c28abf1050dbd8`	systemmod	malicioushigh
10-09 00:00:00	upsert	FILE`3da036fef7c7d36a99489907afd648fa5ed4e615f1f5e974a0f10fd7531778aa`	shell	maliciouscritical
10-09 00:00:00	upsert	FILE`3db6db5f1f3632600bac39268a98e86bc1902b8d6ada95078825a7f04be3baaf`	shell	maliciouscritical
10-09 00:00:00	upsert	FILE`3dbab1c7a9d19002a3b4b32442f16b1de68265364fce1203a8fab388b8ed5007`	—	malicioushigh
10-09 00:00:00	upsert	FILE`3dca0c838e2e2a17d0d1d3e47556b84c3c5ff48ea4aa7716295a6c935093bae4`	shell	malicioushigh
10-09 00:00:00	upsert	FILE`3df7631c035dc34c6c7ffb618bc14d07cffd0670e3617391a3cc7833e68fa986`	shell	malicioushigh
10-09 00:00:00	upsert	FILE`8c092a047883ac90c4107d716d5386cf582c782ea2ca4be8356682f1958a4d17`	netpass	malicioushigh
10-09 00:00:01	upsert	FILE`3df84942ec9dd597f5a2401159017e8c420a7575b5d1b99f0b223974ec63d72f`	shell	malicioushigh
10-09 00:00:01	upsert	FILE`3e003e1f17ad77703c5abc74af8236c52d80e0693a84bde40901453063f64371`	shell	malicioushigh
10-09 00:00:01	upsert	FILE`3e0fabebfb50ea0b9d12801941a51984c333517e9b8a6de42c20eb89b6a54e79`	shell	malicioushigh
10-09 00:00:01	upsert	FILE`4812f312e0ae95da7a4a3358d2d8e79b0ff43642636c717b0147064af3136c05`	—	malicioushigh
10-09 00:00:01	upsert	FILE`b75f8e1b8319e8df0ebbad3e48dd17aec611ab7da943474fb1ba5845164fc268`	wirelesskeyview	malicioushigh
10-09 00:00:01	upsert	IP`88.99.13.69`	recur	maliciouslow
10-09 00:00:01	upsert	FILE`b7c5c75c7cb46b1be2086d41440aa85bf268e8024e9f1ca4c2bbb75f7a597b62`	productkey	malicioushigh
10-09 00:00:01	upsert	DOMAIN`a7788.1apps.com`	recur	maliciousmedium
10-09 00:00:01	upsert	FILE`104c50d2f2c4c6a91b4530daf9cbe63c277427f0002ba49687061497cde51b9b`	—	malicioushigh

View an event as JSON

JSON · first event

{
  "action": "upsert",
  "analysis": {
    "confidence": 100,
    "family": "symmi",
    "malicious": true,
    "risk_score": 80,
    "severity": "high"
  },
  "id": "event--9d87ce43-1028-5621-9310-7997e949f47f",
  "indicator": {
    "links": {
      "self": "https://api.virussign.com/v1/ioc/files/7844becb4970bced0e5959968062ba88a0b18693857d1024f3cf70c9e2d2e00d"
    },
    "md5": "70e2a688ab4d8bc1c9ea41ad58767dc6",
    "sha1": "6d077329cb55e16db500b24428bfc8b47b140129",
    "sha256": "7844becb4970bced0e5959968062ba88a0b18693857d1024f3cf70c9e2d2e00d",
    "type": "file",
    "value": "7844becb4970bced0e5959968062ba88a0b18693857d1024f3cf70c9e2d2e00d"
  },
  "tags": [
    "exe",
    "executable",
    "genericrxax",
    "pe",
    "peexe",
    "setupdev",
    "spreader",
    "symmi",
    "trojan",
    "wacapew",
    "win32",
    "windows",
    "worm"
  ],
  "timestamp": "2026-10-09T00:00:00Z",
  "validity": {
    "first_seen": "2022-07-03T06:45:29Z",
    "last_seen": "2026-10-08T23:59:56Z"
  }
}

Browse available samples from the past seven days. Each contains selected feed events for evaluation. JSON preserves the API event structure; CSV uses field paths for nested objects and JSON for arrays.

KEEP YOUR INTELLIGENCE CURRENT

Build beyond the sample.

Request an API key to access the full feed, with ongoing updates and richer context for your workflow. Samples are provided under our Terms of Use.

Request full access Feed docs →

Files are hashed locally in your browser and never uploaded. Only the SHA-256 is sent for lookup. Standard query quota applies.