Overview

overview

10

Static

static

3

8c423c836a...0N.dll

windows7-x64

10

8c423c836a...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c423c836aa94f42716053779da11880N.exe

  • Size

    698KB

  • Sample

    240805-ph2rtswaqk

  • MD5

    8c423c836aa94f42716053779da11880

  • SHA1

    02e938de6ec2d0c2407e6580a68596bc701f5952

  • SHA256

    c0fba5d50be7652071f0304974b78e6f901631e6e5dc69b49734ec06da0a3202

  • SHA512

    5e851111ae7a076610573a576101c641f6da044ab1ea447a2a71c832a92557e10922288d1c9f34e86c1ddc46489311ed45d16c9da353b46130ba0cfa1014d5b3

  • SSDEEP

    6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYf:o6RI1Fo/wT3cJYYYYYYYYYYYYf

Score
10/10
yunsipbankerdiscoverytrojan

Malware Config

Targets

    • Target

      8c423c836aa94f42716053779da11880N.exe

    • Size

      698KB

    • MD5

      8c423c836aa94f42716053779da11880

    • SHA1

      02e938de6ec2d0c2407e6580a68596bc701f5952

    • SHA256

      c0fba5d50be7652071f0304974b78e6f901631e6e5dc69b49734ec06da0a3202

    • SHA512

      5e851111ae7a076610573a576101c641f6da044ab1ea447a2a71c832a92557e10922288d1c9f34e86c1ddc46489311ed45d16c9da353b46130ba0cfa1014d5b3

    • SSDEEP

      6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYf:o6RI1Fo/wT3cJYYYYYYYYYYYYf

    Score
    10/10
    yunsipbankerdiscoverytrojan

    • Yunsip

      Remote backdoor which communicates with a C2 server to receive commands.

      trojanbankeryunsip
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks