Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:44:44 UTC
Home > List all groups > List all tools > List all groups using tool HyperBro
 Tool: HyperBro
Names HyperBro
Category Malware
Type Backdoor, Info stealer, Credential stealer, Keylogger
Description
(Kaspersky) The operators used the HyperBro Trojan as their last-stage in-memory
remote administration tool (RAT). The timestamps for these modules are from
December 2017 until January 2018. The anti-detection launcher and decompressor make
extensive use of Metasploit’s shikata_ga_nai encoder as well as LZNT1 compression.
Information MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 01 November 2021
Download this tool card in JSON format
All groups using tool HyperBro
Changed Name Country Observed
APT groups
 Emissary Panda, APT 27, LuckyMouse, Bronze Union 2010-Aug 2023
 UNC215 2019
2 groups listed (2 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b4c5f160-6c46-4cd3-8abe-420b314ffe0e
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b4c5f160-6c46-4cd3-8abe-420b314ffe0e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b4c5f160-6c46-4cd3-8abe-420b314ffe0e
Page 2 of 2