FREE THREAT INTELLIGENCE SAMPLE

A preview of the full feed.

Explore a small selection of our intelligence: up to 50 events per daily sample, free to view and download. Request an API key for full feed access.

Download JSON Export CSV

50 eventsSample date 2026-10-10Published 2026-10-10 01:17:18 UTC

Inside the sample

Time (UTC)	Action	Indicator	Context	Analysis
10-10 00:00:06	upsert	FILE`10140e4d5898d6ec53d4f0938c2b085471ea74fcf2458d29a19431cf01a3f880`	csrvpr	maliciouscritical
10-10 00:00:06	upsert	FILE`80ea83fd04182dd244737a840881e16bc3285c1a51711d68cbf0306d2dd5fb29`	csrvpr	maliciouscritical
10-10 00:00:07	upsert	FILE`a99fa681241078aa43cf184285810f1e8a6afd43188ae2f1e433f0855df2ee5e`	csrvpr	maliciouscritical
10-10 00:00:07	upsert	FILE`b4de92bce10774822f8ea728658b7f382ad4d40a3288ccc1760ffde4b0e3a9d1`	csrvpr	maliciouscritical
10-10 00:00:07	upsert	FILE`e7f52bd680d0f505fb9c9ea98d70374dd022819c783f95cc61c51fc62023e5f8`	csrvpr	maliciouscritical
10-10 00:00:10	upsert	FILE`7ba2f56eac0d2882f184a82fb1b05d1073ccf0a349b6b6b33133477e0fdc8968`	filerepmalware	malicioushigh
10-10 00:00:11	upsert	FILE`5e1c86bf578683d960214146993c293ccdee51908329b36bcee3129394382acb`	genericfca	malicioushigh
10-10 00:00:11	revoke	FILE`e045059ebeb045ad943d2ca2bf58e85c856b3b5cd22af614cc1571453c36d822`	fp	withdrawn
10-10 00:00:11	upsert	FILE`7aef0846a4b89dc8156fe7653b8032e04d8db10656970047c53ac6866970ff67`	socks	maliciouscritical
10-10 00:00:11	upsert	FILE`3608ce72ec1bf8a483b9ce7549cb5bf78054d9650846e666e1c5c172ad53e3ec`	cyzt	malicioushigh
10-10 00:00:12	upsert	FILE`c09bbea19905610caaa7bb277780cec2796c698b1463f8cb2641c8eeefc9203e`	scam	malicioushigh
10-10 00:00:12	upsert	FILE`4fe2441691eda9df9be6a462270defc9b1d3b04f7531c7d256f3d3ee64b82c4a`	cyzt	malicioushigh
10-10 00:00:12	upsert	FILE`ae483559a3bb363d4609d492022a42d1db49b56b7b694cd5734db6b7c1aa054b`	—	maliciousmedium
10-10 00:00:12	upsert	FILE`24d5805bcbd542dc500aad54b14324861cf03697855de2b4764f56173e98522a`	cyzt	malicioushigh
10-10 00:00:13	upsert	FILE`f970261cf6dd7cbc56e17fcd1bbb984cf084f3189f24cfece6f0e8d55614a88f`	asrisk	malicioushigh
10-10 00:00:14	upsert	FILE`6a406785e424d60d8cf733bbb9d3861444707b7d8ddf3b5216f087873916a378`	asrisk	malicioushigh
10-10 00:00:15	upsert	DOMAIN`wolrdcup2026202620262026.dynuddns.net`	sev_down	maliciousmedium
10-10 00:00:15	upsert	FILE`fd1e8016c04076fc3a03a41ec004b02094bc7ed85c04fadc1a808907e6031877`	obfscred	malicioushigh
10-10 00:00:16	upsert	FILE`2e6a8efe72cbef506e36e02153ac02bf9ca716d8bdce073a0f9daf3202998de5`	socks	maliciouscritical
10-10 00:00:17	upsert	FILE`f05d1e53bb0a7ad9352cda4acdf2c9bfb115d2441648694506362c638b6a1715`	obfscred	malicioushigh
10-10 00:00:17	upsert	FILE`82680e2351fa916eaad477f4879871c56dfe289e12970cb17fa4717b784d9d73`	socks	maliciouscritical
10-10 00:00:17	upsert	FILE`a961311557c664ade619c649eb9342845d5ba065b59cbb661439a3149812fcfa`	truesight	malicioushigh
10-10 00:00:17	upsert	FILE`9e30b8b85643909aa7a334a06837f9bb8814311ba487d7964cb2762c75552e4f`	downloader50	maliciouscritical
10-10 00:00:17	upsert	FILE`0b38874b8e4e90bc700e66267d10306dbd534c8113f19c3e92a2cfbd0d775cab`	—	malicioushigh
10-10 00:00:17	upsert	FILE`0d94397ff274ac22babd4f5c85c11507cf814fd4547a01e18a3d4db2428a68c5`	—	malicioushigh
10-10 00:00:17	upsert	FILE`3f1b9aeca9eed7df7139fe0121edf52d4a26e9f4c7f4db3feec98c3846a03c56`	—	malicioushigh
10-10 00:00:17	upsert	FILE`41e1b97e5092231b27f14f6b1e3d5e719546713fc89fdb531b602cfa190c3cfe`	—	malicioushigh
10-10 00:00:17	upsert	FILE`519d7c6c5d1e24fee021042891fdc37b79f00dae4d8d968257165dab58f8ee4c`	—	malicioushigh
10-10 00:00:17	upsert	FILE`5c28ad1c86c8a9060bd4e2e97c3aa1a2f71c6729d469336f3c3678ee383ba805`	—	malicioushigh
10-10 00:00:17	upsert	FILE`778a5d3decaa3e60e40979adb3a351f0be91973025e99b06b9a4b41c3b853e38`	—	malicioushigh
10-10 00:00:17	upsert	FILE`84c580092537057550bd8de19ef3af0626f9827f8d10ec55581fe57ee5c3bccb`	—	malicioushigh
10-10 00:00:18	upsert	FILE`1cab8275d0d496ea089a545fdb63ae6a66c33516cdb7109e979c1934c8d80c5f`	fakeale	malicioushigh
10-10 00:00:18	upsert	FILE`e41306132539349506c4a269f83fd6865b928eea558ef625b30377700869f55e`	corewarrior	malicioushigh
10-10 00:00:18	upsert	FILE`77ca8b8e22ae243393cc7e9d93bfb0368be98aa6c6814135497f27a3518393c5`	cyzt	malicioushigh
10-10 00:00:19	upsert	FILE`0fe8340606259382737ffd1b778b0af74fa7830859969d6bb574a9dd98b96611`	corewarrior	malicioushigh
10-10 00:00:19	upsert	FILE`2fb3269cf1057acce4f6a3b1550b7b15af86845f34f826f5307b45d5c3546afe`	corewarrior	malicioushigh
10-10 00:00:19	upsert	FILE`5a0769d582aa006b95148bee1d15ce14f840e5d6e61e1814b1c21d99bc44db02`	socks	maliciouscritical
10-10 00:00:19	upsert	FILE`07ea3b5965d99a14bdd3f0887acb7123a16e7d0d5e3b9f97998abc9e0b410a1b`	—	malicioushigh
10-10 00:00:19	upsert	FILE`222401568c7043c46f7a64f6f42855830a1a5e42d3c2fdbc5f81f861a87ef59c`	—	maliciouslow
10-10 00:00:19	upsert	FILE`26c89dfba18850733b287fc7e3787ea71c0b76c7ef338aeefd80d929cc1aa52f`	—	maliciouslow
10-10 00:00:19	upsert	FILE`35a62af17ce9fe313fc9bce186d8f566ee86a3bfc5946144fb09b6eab31c8605`	—	malicioushigh
10-10 00:00:20	upsert	FILE`c6f2723443dc5dafe31bbe9618233811e5ebe2a4e92735d6c0703bfb091d159a`	powershell	malicioushigh
10-10 00:00:20	upsert	FILE`49f6f35fd285da4f9c7739c2f85853aa2f310c78be3b9971c316775f6e071168`	—	maliciouslow
10-10 00:00:20	upsert	FILE`c587cd4a6abc4e1dec2207bd87100e6b7742e289eb64a7d204d64a8a2939d383`	cyzt	malicioushigh
10-10 00:00:20	upsert	FILE`3845d4327da5813213f5e17b58dc7fa970a9a680e04a67e251b19434516fd6cb`	genericfca	malicioushigh
10-10 00:00:21	upsert	FILE`9f4918d92d8250c923f87376c96c35727e8160162decb4b993eeea4f59c59455`	socks	maliciouscritical
10-10 00:00:21	upsert	FILE`f1330c532a24c2ff9cde3ea4ae9f8a3c8d2788a8672cccabb6aa1fbb575d9cbc`	lazy	malicioushigh
10-10 00:00:22	upsert	FILE`d63b9ba616dde047c33200ce78f4ccceea21ba715d4781e12b87e1c6db4ca2f4`	cyzt	malicioushigh
10-10 00:00:22	upsert	FILE`2c2d4a57e9d8fa0051a83af68c0b4d26e9fa1727da3a4d8a54e82a6626cf3116`	obfscred	malicioushigh
10-10 00:00:22	upsert	FILE`d3c3757ecc6a725ec41d0e84197f22221e9a1cc8015b594d0ed02c114065a5ea`	cyzt	malicioushigh

View an event as JSON

JSON · first event

{
  "action": "upsert",
  "analysis": {
    "confidence": 0,
    "family": "csrvpr",
    "malicious": true,
    "risk_score": 20,
    "severity": "critical"
  },
  "id": "event--9f9beb75-6c7f-50c2-9856-d23fbc089176",
  "indicator": {
    "links": {
      "self": "https://api.virussign.com/v1/ioc/files/10140e4d5898d6ec53d4f0938c2b085471ea74fcf2458d29a19431cf01a3f880"
    },
    "md5": "9dce1e226cda29c8fd61afff57ec073e",
    "sha1": "ccebb2db0812040775e331cdad60b3402b7575b0",
    "sha256": "10140e4d5898d6ec53d4f0938c2b085471ea74fcf2458d29a19431cf01a3f880",
    "type": "file",
    "value": "10140e4d5898d6ec53d4f0938c2b085471ea74fcf2458d29a19431cf01a3f880"
  },
  "tags": [
    "compressed",
    "contains-macho",
    "csrvpr",
    "detect-debug-environment",
    "java",
    "long-sleeps",
    "mac-app",
    "self-signed",
    "sets-process-name",
    "zip"
  ],
  "timestamp": "2026-10-10T00:00:06Z",
  "validity": {
    "first_seen": "2026-09-25T01:22:16Z",
    "last_seen": "2026-10-09T19:10:36Z"
  }
}

Browse available samples from the past seven days. Each contains selected feed events for evaluation. JSON preserves the API event structure; CSV uses field paths for nested objects and JSON for arrays.

KEEP YOUR INTELLIGENCE CURRENT

Build beyond the sample.

Request an API key to access the full feed, with ongoing updates and richer context for your workflow. Samples are provided under our Terms of Use.

Request full access Feed docs →

Files are hashed locally in your browser and never uploaded. Only the SHA-256 is sent for lookup. Standard query quota applies.