Overview

overview

10

Static

static

3

82e229a2ad...1f.dll

windows7-x64

10

82e229a2ad...1f.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82e229a2ad5bb0b83ce6dd994792922fa36636a303852237dfa2213daf97111f

  • Size

    1.1MB

  • Sample

    240818-bqxwysxelc

  • MD5

    4ff8593a6591e4dbb100c30e0b658235

  • SHA1

    376a81ee7818f2738609183ba20a8daeb146c903

  • SHA256

    82e229a2ad5bb0b83ce6dd994792922fa36636a303852237dfa2213daf97111f

  • SHA512

    cc005ea9e828763df05cff169c8146e3b5467d68c1043472d415008b12849ba64141e2d888c85eb4e433ba6cdd07b1f767baf74a72bbf9f9e765b13b2dcb796e

  • SSDEEP

    6144:jDgtfRQUHPw06MoV2nwTBlhm8zDgtfRQUHPw06MoV2nwTBlhm8J:jDgN6MoIwT3vDgN6MoIwT31

Score
10/10
yunsipbankerdiscoverytrojan

Malware Config

Targets

    • Target

      82e229a2ad5bb0b83ce6dd994792922fa36636a303852237dfa2213daf97111f

    • Size

      1.1MB

    • MD5

      4ff8593a6591e4dbb100c30e0b658235

    • SHA1

      376a81ee7818f2738609183ba20a8daeb146c903

    • SHA256

      82e229a2ad5bb0b83ce6dd994792922fa36636a303852237dfa2213daf97111f

    • SHA512

      cc005ea9e828763df05cff169c8146e3b5467d68c1043472d415008b12849ba64141e2d888c85eb4e433ba6cdd07b1f767baf74a72bbf9f9e765b13b2dcb796e

    • SSDEEP

      6144:jDgtfRQUHPw06MoV2nwTBlhm8zDgtfRQUHPw06MoV2nwTBlhm8J:jDgN6MoIwT3vDgN6MoIwT31

    Score
    10/10
    yunsipbankerdiscoverytrojan

    • Yunsip

      Remote backdoor which communicates with a C2 server to receive commands.

      trojanbankeryunsip
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks