ThreatTrove

Valley

6 cached samples attributed to Valley by 3 sources, through 3 distinct vendor labels.

6cached samples
3sources naming it
3distinct labels
3also in another family

Samples

Newest cache entry first. Every row links to the full report, where each source's own answer is shown unsummarised. The labels behind these rows are listed below the table.

SampleVerdictNamed byAlso taggedCached
e9e5dcabaeb94592ec7d409163f79ccfc241f737 Malicious malwarebazaar – 6d ago
7c0d91f3d3b03ea076368c432e69a98f3484e0d4 Suspicious malwarebazaar – 6d ago
38a4ea53a05977e46208c303f4df2c936be311c1 Malicious malwarebazaarvirustotal SilverFox 6d ago
3f803bafb2041916f177b065368c79ebce5e99c92fe1f4cf32b68c700aaba086 Malicious malwarebazaar Yogi 6d ago
6098a3066c8f3edbc83fbc7f516f242a83a7e5fb7fbac7a35b46ee89ecd607bc Malicious hybridanalysismalwarebazaarvirustotal SilverFox 6d ago
fe787eb95026b3e8f6a389f74a2f26e2202b1fada02f603dab173a7d8464d7fd Malicious malwarebazaar – 6d ago
1–6 of 6 page 1 / 1

Why these samples are here

Each source returns its own string for a family. This is every label behind the 6 samples above, the source that returned it, and how many samples carried it. Counts overlap: one sample can be named twice, so they do not add up to the sample total.

Label as returnedSource that returned itSamples carrying it
ValleyRAT malwarebazaar 6 samples
Valley.Generic hybridanalysis 1 sample
1 more label carries an engine suffix or a second family name

The same evidence in less readable strings: an engine's own suffix, a variant token, or a label that names two families. They are still this family's evidence and they are counted in the 3 labels above; a token the alias table does not know is never guessed at, so it stays exactly as the source sent it.

Label as returnedSource that returned itSamples carrying it
trojan.valley/silverfox virustotal 2 samples

Named alongside

Counted per sample: a sample tagged with both families adds one here. This is co-occurrence in vendor labels, not a claim that the two families are related.

Derived from cached source answers, newest cache entry 2026-11-02 17:37. A sample leaves this page when the cache entry it was read from is replaced; a generic or unrecognised label never put it here.