Netskope Threat Labs

HyperBro

ATP Sandbox Adv. HeuristicsNetskope IPS

Description

HyperBro is a custom in-memory backdoor used by the Threat Group-3390 intrusion set.

Stats

First seen
April 2022
Last seen
October 2026

MITRE ATT&CK techniques

12 techniques across 5 tactics.

TA0002 Execution

TA0005 Stealth

TA0007 Discovery

  • T1007System Service Discovery

TA0009 Collection

TA0011 Command and Control

Associated groups

Alert name variants

Alert Name
Win32.Backdoor.HyperBro
Win32.Trojan.HyperBro

Related IPS Signatures

Signature Name
MALWARE-OTHER Win.Trojan.Hyperbro variant payload download attempt

Related families

InvisiMoleSysUpdateMetamorfoBazarCobalt Strike

References