hightestEmerging Threat
Potential Ursnif Malware Activity - Registry
Detects registry keys related to Ursnif malware.
windowsregistry_add
2025-10-22
Emerging Threats
Malware2023, 2019
Ursnif
4Rules
5References
2Folders
2025-10-22Latest
Summary
Ursnif is tracked here as a malware family or toolset with 4 Sigma detections spanning 2023, 2019. Coverage centers on proxy, windows / process_creation, windows / registry_add.
Related Detections
Search this threathightestEmerging Threat
Ursnif Redirection Of Discovery Commands
Detects the redirection of Ursnif discovery commands as part of the initial execution of the malware.
windowsprocess_creation
2023-07-16
highstableEmerging Threat
Ursnif Malware Download URL Pattern
Detects download of Ursnif malware done by dropper documents.
Generalproxy
2022-08-15
2021-08-09
References
125
Resolving title…
blog.yoroi.companyResolving title…
blog.trendmicro.com3
4Resolving title…
Internal ResearchResolving title…
notebook.communityResolving title…
fortinet.com