yunsip | be492a754e33e397f73d7a692e7e93c534f73f674d501e417bae77507557c042 | Triage

Sharing

General

Target

be492a754e33e397f73d7a692e7e93c534f73f674d501e417bae77507557c042N
Size

807KB
Sample

241109-p5qcbavdkl
MD5

49dcdd8d01bbc85d5a731f7be71671e0
SHA1

10d6a9891fff4a3f1a62bdf21597b11502b96030
SHA256

be492a754e33e397f73d7a692e7e93c534f73f674d501e417bae77507557c042
SHA512

f276251f5e3a40f37343e9920922731aa3457b2457ace9bf29b356f73b401591ec01cf11e7d7d6d4c1bc536c48605cd65882595f73754e0be73caa24fb45153e
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYS:o6RI1Fo/wT3cJYYYYYYYYYYYYS

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  be492a754e33e397f73d7a692e7e93c534f73f674d501e417bae77507557c042N
- Size
  
  807KB
- MD5
  
  49dcdd8d01bbc85d5a731f7be71671e0
- SHA1
  
  10d6a9891fff4a3f1a62bdf21597b11502b96030
- SHA256
  
  be492a754e33e397f73d7a692e7e93c534f73f674d501e417bae77507557c042
- SHA512
  
  f276251f5e3a40f37343e9920922731aa3457b2457ace9bf29b356f73b401591ec01cf11e7d7d6d4c1bc536c48605cd65882595f73754e0be73caa24fb45153e
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYS:o6RI1Fo/wT3cJYYYYYYYYYYYYS
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan