Gepys malware family
Gepys is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-20, most recently 2026-08-21. Observed ATT&CK techniques include T1105, T1112.
Corpus statistics
- Publicly analyzed samples: 3
- First seen: 2026-08-20
- Last seen: 2026-08-21
- Verdicts: malicious 3
- File types: pe 3
ATT&CK techniques used by Gepys
Recent Gepys samples
- 697a0ab43baef16234d46a7be095f0f1d68d8872a6ecc2b4156108935bdc812a - malicious (2026-08-21)
- 9a08418c873aece642b453c4d34bccd97b282330e8edaaddfd1a142972f79e86 - malicious (2026-08-21)
- 1643c9e79e2a60299a1cb1f4ff09408b99f188c1cddc1145678d8f7a6c05f1c4 - malicious (2026-08-20)
Frequently asked about Gepys
- What is Gepys?
- Gepys is a malware family tracked by MalwareAnalyzer by Cyble across 3 publicly analyzed samples. First seen 2026-08-20, most recently 2026-08-21. Observed ATT&CK techniques include T1105, T1112.
- How many Gepys samples have been analyzed?
- MalwareAnalyzer by Cyble holds 3 publicly analyzed samples attributed to Gepys, first seen 2026-08-20 and most recently 2026-08-21. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Gepys use?
- Across our Gepys samples the most frequently observed techniques are T1105 (3), T1112 (3). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Gepys use?
- Gepys samples in this corpus are distributed as pe (3).
- Is Gepys malicious?
- 3 of 3 analyzed Gepys samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends