yunsip | 080b3bc0133063474989f8d51d5ed59453823a3b3a98cee987e8df1046caba4a | Triage

Sharing

General

Target

080b3bc0133063474989f8d51d5ed59453823a3b3a98cee987e8df1046caba4aN
Size

762KB
Sample

241107-jh64nayell
MD5

1f22aad5c386becf28dacdaf1d90cf60
SHA1

3ce2aa2add48055b7e69f3ae413e957fc04fa2b5
SHA256

080b3bc0133063474989f8d51d5ed59453823a3b3a98cee987e8df1046caba4a
SHA512

610429f402cc34de00be82b7bba0f2e14bb09436312997b0a1ce41fcce26ad01f203b01bbaf683ccda0efd23e490003a7698e4e08ba51a96d1fbc638da81d755
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0j:jDgtfRQUHPw06MoV2nwTBlhm8b

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  080b3bc0133063474989f8d51d5ed59453823a3b3a98cee987e8df1046caba4aN
- Size
  
  762KB
- MD5
  
  1f22aad5c386becf28dacdaf1d90cf60
- SHA1
  
  3ce2aa2add48055b7e69f3ae413e957fc04fa2b5
- SHA256
  
  080b3bc0133063474989f8d51d5ed59453823a3b3a98cee987e8df1046caba4a
- SHA512
  
  610429f402cc34de00be82b7bba0f2e14bb09436312997b0a1ce41fcce26ad01f203b01bbaf683ccda0efd23e490003a7698e4e08ba51a96d1fbc638da81d755
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0j:jDgtfRQUHPw06MoV2nwTBlhm8b
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan