yunsip | 7a68663cbd952285199edf4ba458a5a17605b248254502c6ab8e6c1d993fbdda | Triage

Submit
Reports

Overview

overview

Static

static

3

588c3cf5be...cs.dll

windows7-x64

588c3cf5be...cs.dll

windows10-2004-x64

Sharing

General

Target

588c3cf5bee608ad5b553fe397525fd0_NeikiAnalytics.exe
Size

642KB
Sample

240517-31shrsaa3z
MD5

588c3cf5bee608ad5b553fe397525fd0
SHA1

5763bba4b0ac60c1e41fdd73b5face0ff3e1ccf6
SHA256

7a68663cbd952285199edf4ba458a5a17605b248254502c6ab8e6c1d993fbdda
SHA512

6c8f83b65fdb72db7925ba683cecdd393b7c1695fe542d7d9826319ef591437398cb25329f4eebddbbf91585b56022fdbf6a2ffcd9ef90583d34e9c5d14ae923
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0x:jDgtfRQUHPw06MoV2nwTBlhm8p

Score

10^/10

yunsip banker trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

588c3cf5bee608ad5b553fe397525fd0_NeikiAnalytics.dll

Resource

win7-20240508-en

yunsip banker trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

588c3cf5bee608ad5b553fe397525fd0_NeikiAnalytics.dll

Resource

win10v2004-20240226-en

yunsip banker trojan

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  588c3cf5bee608ad5b553fe397525fd0_NeikiAnalytics.exe
- Size
  
  642KB
- MD5
  
  588c3cf5bee608ad5b553fe397525fd0
- SHA1
  
  5763bba4b0ac60c1e41fdd73b5face0ff3e1ccf6
- SHA256
  
  7a68663cbd952285199edf4ba458a5a17605b248254502c6ab8e6c1d993fbdda
- SHA512
  
  6c8f83b65fdb72db7925ba683cecdd393b7c1695fe542d7d9826319ef591437398cb25329f4eebddbbf91585b56022fdbf6a2ffcd9ef90583d34e9c5d14ae923
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0x:jDgtfRQUHPw06MoV2nwTBlhm8p
Score

10^/10

yunsip banker trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

yunsipbankertrojan

behavioral2

yunsipbankertrojan

© 2018-2024

Terms | Privacy