yunsip | 8179e9cc8f7311145ee2392644fb1a1a75a6d8dca6f6d113c23385a3d9b77974 | Triage

Sharing

General

Target

8179e9cc8f7311145ee2392644fb1a1a75a6d8dca6f6d113c23385a3d9b77974
Size

1.0MB
Sample

241030-blvwssvlhn
MD5

708a0ee42898e74e8bb3b3b356db5b12
SHA1

45aadea0272a6ba377fc36e6f9a8560f6ab16be4
SHA256

8179e9cc8f7311145ee2392644fb1a1a75a6d8dca6f6d113c23385a3d9b77974
SHA512

85693aa1ba9fc3155d3547a1160ef441b332df88f23c10ca55124340a45f489a3b89c2ebc74cb48afa69d822191d5e152e0127eca7f577122ebf4b94d162bbab
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0W:jDgtfRQUHPw06MoV2nwTBlhm8e

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  8179e9cc8f7311145ee2392644fb1a1a75a6d8dca6f6d113c23385a3d9b77974
- Size
  
  1.0MB
- MD5
  
  708a0ee42898e74e8bb3b3b356db5b12
- SHA1
  
  45aadea0272a6ba377fc36e6f9a8560f6ab16be4
- SHA256
  
  8179e9cc8f7311145ee2392644fb1a1a75a6d8dca6f6d113c23385a3d9b77974
- SHA512
  
  85693aa1ba9fc3155d3547a1160ef441b332df88f23c10ca55124340a45f489a3b89c2ebc74cb48afa69d822191d5e152e0127eca7f577122ebf4b94d162bbab
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0W:jDgtfRQUHPw06MoV2nwTBlhm8e
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan