MalwareBazaar Database

This page shows some basic information the YARA rule APT_APT28_Win_FreshFire including corresponding malware samples.

Database Entry

YARA Rule:APT_APT28_Win_FreshFire
Create hunting rule
Author:threatintel@volexity.com
Description:The FRESHFIRE malware family. The malware acts as a downloader, pulling down an encrypted snippet of code from a remote source, executing it, and deleting it from the remote server.
Firstseen:2025-10-28 13:39:42 UTC
Lastseen:2026-04-15 11:32:47 UTC
Sightings:2

Malware Samples

The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter