Poison Ivy malware

Poison Ivy is a historical remote access trojan, still found in targeted intrusions, providing remote shell, file and process management.

Malva.RE has analysed 1 public sample tagged Poison Ivy, statically and without execution. The latest public sample was seen on 2025-06-22.

File types

  • PE Executable1

Latest public Poison Ivy samples

Sample Type First seen
86a8a49b1ef99c116aa66d5cf16ffead675d4e488b2924b417bfb84a6a162902 PE Executable 2025-06-22

Analyse your own Poison Ivy sample

Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.

Analyse a file for free
An error has occurred. This application may no longer respond until reloaded. Reload 🗙