yunsip | ff243e3a9f1a89879099589eec4acec6803a3742aa186203fbac1432c28bd390 | Triage

Sharing

General

Target

81e7077a41d476b37068f48fa8cd739a_JaffaCakes118
Size

308KB
Sample

241031-gqvz9asckr
MD5

81e7077a41d476b37068f48fa8cd739a
SHA1

3d21e08dbc6db4739733851ca6cbc7fa342f598b
SHA256

ff243e3a9f1a89879099589eec4acec6803a3742aa186203fbac1432c28bd390
SHA512

61765f609c64a7d53390532a49a27ffb30dcc977ca1cd913d469f0317ae1ff8e5d0579ee55a1f3668ea435095f07daddba4e011a51d639ec3d5d67b68792d96e
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0G:jDgtfRQUHPw06MoV2nwTBlhm8+

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  81e7077a41d476b37068f48fa8cd739a_JaffaCakes118
- Size
  
  308KB
- MD5
  
  81e7077a41d476b37068f48fa8cd739a
- SHA1
  
  3d21e08dbc6db4739733851ca6cbc7fa342f598b
- SHA256
  
  ff243e3a9f1a89879099589eec4acec6803a3742aa186203fbac1432c28bd390
- SHA512
  
  61765f609c64a7d53390532a49a27ffb30dcc977ca1cd913d469f0317ae1ff8e5d0579ee55a1f3668ea435095f07daddba4e011a51d639ec3d5d67b68792d96e
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0G:jDgtfRQUHPw06MoV2nwTBlhm8+
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan