Overview

overview

10

Static

static

10

864c542b34...84.dll

windows7-x64

10

864c542b34...84.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    864c542b34b45ff3a6a8a613453b8abfc86260edbb24f9bd07699d2ab3df7784

  • Size

    714KB

  • Sample

    240407-2yaphaha61

  • MD5

    b30609cbcf995e5f5a428c65c0cb89df

  • SHA1

    d982c77af8e783e11130759ba4a159f3fcd0772d

  • SHA256

    864c542b34b45ff3a6a8a613453b8abfc86260edbb24f9bd07699d2ab3df7784

  • SHA512

    dcb45494baf8587b0d3e301422ac47be5e109d275c45434a5850dbe4b21253959483dcaad54111f9f3416fb0fb0827d1d455d181ce292ca3df33a0c3e53ccfe4

  • SSDEEP

    1536:xGDOFSxjmiBu1Os57IXLUxUX0uX+u8Dj7XE+40b0vwjb87uGl0xQsv:wqFSxjolNmzX0Xu8vAn204jb+uHxQsv

Score
10/10
yunsipbankertrojanupx

Malware Config

Targets

    • Target

      864c542b34b45ff3a6a8a613453b8abfc86260edbb24f9bd07699d2ab3df7784

    • Size

      714KB

    • MD5

      b30609cbcf995e5f5a428c65c0cb89df

    • SHA1

      d982c77af8e783e11130759ba4a159f3fcd0772d

    • SHA256

      864c542b34b45ff3a6a8a613453b8abfc86260edbb24f9bd07699d2ab3df7784

    • SHA512

      dcb45494baf8587b0d3e301422ac47be5e109d275c45434a5850dbe4b21253959483dcaad54111f9f3416fb0fb0827d1d455d181ce292ca3df33a0c3e53ccfe4

    • SSDEEP

      1536:xGDOFSxjmiBu1Os57IXLUxUX0uX+u8Dj7XE+40b0vwjb87uGl0xQsv:wqFSxjolNmzX0Xu8vAn204jb+uHxQsv

    Score
    10/10
    yunsipbankertrojanupx

    • Yunsip

      Remote backdoor which communicates with a C2 server to receive commands.

      trojanbankeryunsip

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks