Overview

overview

10

Static

static

10

b705a74987...f4.dll

windows7-x64

10

b705a74987...f4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b705a749873cd663be73c5e90564e882f085d6d748a9c36ef43fcaacc40477f4

  • Size

    950KB

  • Sample

    240408-a3r1ssbf84

  • MD5

    45674e9231a4b9fa9efd4b5cbdbc8519

  • SHA1

    c453d96e1c3c34c91e6bb4b04522638083bb6386

  • SHA256

    b705a749873cd663be73c5e90564e882f085d6d748a9c36ef43fcaacc40477f4

  • SHA512

    04972fcf6cce83fc2d000493d151909246220bc0b857fa196e15af14164fcd8139bf5f9e0d193058ea1f51a0ef263d0d951ea897ef93ad6a4cb25d47498da64e

  • SSDEEP

    1536:qGDOFSxjmiBu1Os57IXLUxUX0uX+u8Dj7XE+40b0vwjb87uGl0xQsr:lqFSxjolNmzX0Xu8vAn204jb+uHxQsr

Score
10/10
yunsipbankertrojanupx

Malware Config

Targets

    • Target

      b705a749873cd663be73c5e90564e882f085d6d748a9c36ef43fcaacc40477f4

    • Size

      950KB

    • MD5

      45674e9231a4b9fa9efd4b5cbdbc8519

    • SHA1

      c453d96e1c3c34c91e6bb4b04522638083bb6386

    • SHA256

      b705a749873cd663be73c5e90564e882f085d6d748a9c36ef43fcaacc40477f4

    • SHA512

      04972fcf6cce83fc2d000493d151909246220bc0b857fa196e15af14164fcd8139bf5f9e0d193058ea1f51a0ef263d0d951ea897ef93ad6a4cb25d47498da64e

    • SSDEEP

      1536:qGDOFSxjmiBu1Os57IXLUxUX0uX+u8Dj7XE+40b0vwjb87uGl0xQsr:lqFSxjolNmzX0Xu8vAn204jb+uHxQsr

    Score
    10/10
    yunsipbankertrojanupx

    • Yunsip

      Remote backdoor which communicates with a C2 server to receive commands.

      trojanbankeryunsip

    • UPX dump on OEP (original entry point)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks