yunsip | 9ba185ae51b91342eff46b075cdb4eafdccc64d9fc66783bfb8c855e26a8cf7b | Triage

Sharing

General

Target

9ba185ae51b91342eff46b075cdb4eafdccc64d9fc66783bfb8c855e26a8cf7b.exe
Size

667KB
Sample

241112-1xv4dasdlc
MD5

7ef9443d4c16f78b11dbbc3ae22bbc2a
SHA1

12df999f2d5b2ed4122eebe02560b241d2f146c5
SHA256

9ba185ae51b91342eff46b075cdb4eafdccc64d9fc66783bfb8c855e26a8cf7b
SHA512

6b0a04759c6a1c6b1ddc1d584251daf7e53c70d601a9121d1c857049caf2760f56a71e11fcbafdcacc1a756b65efe9c466dace853d474ed64e7b8cc0463be064
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY1:o6RI1Fo/wT3cJYYYYYYYYYYYY1

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  9ba185ae51b91342eff46b075cdb4eafdccc64d9fc66783bfb8c855e26a8cf7b.exe
- Size
  
  667KB
- MD5
  
  7ef9443d4c16f78b11dbbc3ae22bbc2a
- SHA1
  
  12df999f2d5b2ed4122eebe02560b241d2f146c5
- SHA256
  
  9ba185ae51b91342eff46b075cdb4eafdccc64d9fc66783bfb8c855e26a8cf7b
- SHA512
  
  6b0a04759c6a1c6b1ddc1d584251daf7e53c70d601a9121d1c857049caf2760f56a71e11fcbafdcacc1a756b65efe9c466dace853d474ed64e7b8cc0463be064
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY1:o6RI1Fo/wT3cJYYYYYYYYYYYY1
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan