versaware.io_hyber.exe
Classification: Malicious
versaware.io_hyber.exe is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-03.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 2 contacted hosts
- 9 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-03 00:45:07 | 2026-09-03 00:45:07 | malicious-activity | |
| Suspicious Sample | Triage | 2026-09-03 00:03:27 | 2026-09-03 00:03:27 | anomalous-activity |
Tags
evasive hiddentear infostealer ransomware defense_evasion discovery evasion execution impact persistence privilege_escalation spyware stealer trojanSample information
- Filenames
- versaware.io_hyber.exe, sample-2b83a577191e.exe
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
1f85acb7394f6a365aeae25e1a6e7ed4- SHA-1
253e3d482682b354ca8c0eda1920f9b9272f57cf- SHA-256
2b83a577191e1a555ede741ab367c67423bd042be7225774491ed3d1c7890647- First indexed
- 2026-09-03 00:03:27
- Last updated
- 2026-09-03 00:57:30
Network contacts
DNS requests
emotet.com i2p2.de malware.wicar.org ryuk.com torproject.org trickbot.com versaware.io wannacry-decryptor.com www.zeltser.com