yunsip | 281a1f1850386820c6423b51ecd77096cd92013f3c6a3d2bf725d3c181eaa418 | Triage

Submit
Reports

Overview

overview

Static

static

3

2281d20981...cs.dll

windows7-x64

2281d20981...cs.dll

windows10-2004-x64

Sharing

General

Target

2281d20981212bbbcb298048288c2650_NeikiAnalytics
Size

618KB
Sample

240514-zgmlmafd4s
MD5

2281d20981212bbbcb298048288c2650
SHA1

7256f119aa0aefdbf3aa29b1071d8202148da963
SHA256

281a1f1850386820c6423b51ecd77096cd92013f3c6a3d2bf725d3c181eaa418
SHA512

81316b8a096c146bfe3895042837d4984baaf512c0a5142f54e0b900402c723b30cab19b2e118c8f2b625d836bbb859ad0cb2ce4c712d9bce96001548463378d
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY5:o6RI1Fo/wT3cJYYYYYYYYYYYY5

Score

10^/10

yunsip banker trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2281d20981212bbbcb298048288c2650_NeikiAnalytics.dll

Resource

win7-20240508-en

yunsip banker trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

2281d20981212bbbcb298048288c2650_NeikiAnalytics.dll

Resource

win10v2004-20240426-en

yunsip banker trojan

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  2281d20981212bbbcb298048288c2650_NeikiAnalytics
- Size
  
  618KB
- MD5
  
  2281d20981212bbbcb298048288c2650
- SHA1
  
  7256f119aa0aefdbf3aa29b1071d8202148da963
- SHA256
  
  281a1f1850386820c6423b51ecd77096cd92013f3c6a3d2bf725d3c181eaa418
- SHA512
  
  81316b8a096c146bfe3895042837d4984baaf512c0a5142f54e0b900402c723b30cab19b2e118c8f2b625d836bbb859ad0cb2ce4c712d9bce96001548463378d
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY5:o6RI1Fo/wT3cJYYYYYYYYYYYY5
Score

10^/10

yunsip banker trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

yunsipbankertrojan

behavioral2

yunsipbankertrojan

© 2018-2024

Terms | Privacy