Overview

overview

10

Static

static

3

92e6c86fcb...0N.dll

windows7-x64

10

92e6c86fcb...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92e6c86fcb6a0adc71f0fd2608a3ebe0N.exe

  • Size

    719KB

  • Sample

    240805-qc3mlswhpm

  • MD5

    92e6c86fcb6a0adc71f0fd2608a3ebe0

  • SHA1

    f304ab1b860a2c57d3ea09f86ddf9701eb1a4e31

  • SHA256

    6d56d33acc294d1f270b4595234370f638400540477911b37cf508cf4a20abc3

  • SHA512

    3815d14ffdfca7843584e714fde70f764391b73fe68e603c09fe318c58258afd4c6217f187afc463c56de9082b22f8aa8c286bd2135b667c06c30c2005207479

  • SSDEEP

    6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYr:o6RI1Fo/wT3cJYYYYYYYYYYYYr

Score
10/10
yunsipbankerdiscoverytrojan

Malware Config

Targets

    • Target

      92e6c86fcb6a0adc71f0fd2608a3ebe0N.exe

    • Size

      719KB

    • MD5

      92e6c86fcb6a0adc71f0fd2608a3ebe0

    • SHA1

      f304ab1b860a2c57d3ea09f86ddf9701eb1a4e31

    • SHA256

      6d56d33acc294d1f270b4595234370f638400540477911b37cf508cf4a20abc3

    • SHA512

      3815d14ffdfca7843584e714fde70f764391b73fe68e603c09fe318c58258afd4c6217f187afc463c56de9082b22f8aa8c286bd2135b667c06c30c2005207479

    • SSDEEP

      6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYr:o6RI1Fo/wT3cJYYYYYYYYYYYYr

    Score
    10/10
    yunsipbankerdiscoverytrojan

    • Yunsip

      Remote backdoor which communicates with a C2 server to receive commands.

      trojanbankeryunsip
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks