Netskope Threat Labs

Multiverze

ATP Sandbox Adv. Heuristics

Description

Multiverze is a trojan that creates multiple persistence mechanisms and downloads additional malware payloads onto infected Windows systems. It ensures it survives reboots and cleanup attempts by writing several footholds, and its downloader behavior connects the system to further payloads chosen by its operators. Detections under this name indicate that malware established durable access, so responders should hunt for every persistence location before declaring a system clean.

Stats

First seen
April 2022
Last seen
October 2026

Alert name variants

Alert Name
Android.Backdoor.Multiverze
Android.Dropper.Multiverze
Android.Exploit.Multiverze
Android.Hacktool.Multiverze
Android.Network.Multiverze
Android.PUA.Multiverze
Android.Ransomware.Multiverze
Android.Spyware.Multiverze
Android.Trojan.Multiverze
Android.Virus.Multiverze

Related families

ConvagentBulzAcsogenixxBoxterDelf

References