Netskope Threat Labs

Rebhip

ATP Sandbox Adv. HeuristicsAV

Rebhip is a worm that self-propagates across network shares and provides backdoor access to cyberattackers on infected systems.

First seen
April 2022
Last seen
September 2026
Alert Name
ByteCode-JAVA.Worm.Rebhip
ByteCode-MSIL.Worm.Rebhip
Dropped:Generic.Rebhip.76F10FFE
Dump:Generic.Rebhip.70F0FD81
Generic.Rebhip.023E60EE
Generic.Rebhip.06FFB4AC
Generic.Rebhip.07EBF7A0
Generic.Rebhip.3705CC03
Generic.Rebhip.375FAE46
Generic.Rebhip.386BA3DC