Shipup malware family
Shipup is a malware family tracked by MalwareAnalyzer by Cyble across 5 publicly analyzed samples. First seen 2026-08-10, most recently 2026-08-23. Observed ATT&CK techniques include T1105, T1112.
Corpus statistics
- Publicly analyzed samples: 5
- First seen: 2026-08-10
- Last seen: 2026-08-23
- Verdicts: malicious 5
- File types: pe 5
ATT&CK techniques used by Shipup
Recent Shipup samples
- 14915ec89ba4f618f6044d874e656339b6ebec4ef26709cde57f63026dfd64f8 - malicious (2026-08-23)
- c26b5991c2e3ef5a58c905705fabc55b38dc1593dcc4636e8567fffcb66e9858 - malicious (2026-08-22)
- a41a87f24340019690de853f508bfc2036f9a5d8cd66c337d9d00bf7d685fb02 - malicious (2026-08-21)
- ac67b1054168acb5bc2bb401ccf581fee9714e6e820ad5c1e23d3e4238446426 - malicious (2026-08-10)
- 5eb5c8deef41c47149c2d12ffbee7f78ccaeae6f8055c046f7b2258d70683a29 - malicious (2026-08-10)
Frequently asked about Shipup
- What is Shipup?
- Shipup is a malware family tracked by MalwareAnalyzer by Cyble across 5 publicly analyzed samples. First seen 2026-08-10, most recently 2026-08-23. Observed ATT&CK techniques include T1105, T1112.
- How many Shipup samples have been analyzed?
- MalwareAnalyzer by Cyble holds 5 publicly analyzed samples attributed to Shipup, first seen 2026-08-10 and most recently 2026-08-23. This counts public submissions to this platform only, so it is a measure of what we have seen rather than of the family's total prevalence.
- What MITRE ATT&CK techniques does Shipup use?
- Across our Shipup samples the most frequently observed techniques are T1105 (4), T1112 (4). Counts are the number of analyzed samples in which each technique was observed.
- What file types does Shipup use?
- Shipup samples in this corpus are distributed as pe (5).
- Is Shipup malicious?
- 5 of 5 analyzed Shipup samples were scored malicious by the fused verdict, which combines multi-engine static scanning, YARA and hash reputation with behavior captured during real sandbox detonation. Each report lists every signal that contributed to its score.
Latest analyzed threats · ATT&CK coverage across the corpus · Threat trends