yunsip | 2c6719996548f9b424ade1fdd8831fea7ae5a3b1a9bb6528eea66f78cf4a58aa | Triage

Sharing

General

Target

2c6719996548f9b424ade1fdd8831fea7ae5a3b1a9bb6528eea66f78cf4a58aaN.exe
Size

807KB
Sample

241113-qznrzawmgj
MD5

56d39666a7e11a4ba1304662893e4160
SHA1

6fa71cf6bb9d873d4a837da7e1434957edca2d2d
SHA256

2c6719996548f9b424ade1fdd8831fea7ae5a3b1a9bb6528eea66f78cf4a58aa
SHA512

a6c022f664e9bf0928cf10e7d89ffd860426527ed0922a4ffd8baef41aa9ff211b68dad205819875c1a810569cd73ea9625ea6b8b8e03a5244224f3e4829b784
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYC:o6RI1Fo/wT3cJYYYYYYYYYYYYC

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  2c6719996548f9b424ade1fdd8831fea7ae5a3b1a9bb6528eea66f78cf4a58aaN.exe
- Size
  
  807KB
- MD5
  
  56d39666a7e11a4ba1304662893e4160
- SHA1
  
  6fa71cf6bb9d873d4a837da7e1434957edca2d2d
- SHA256
  
  2c6719996548f9b424ade1fdd8831fea7ae5a3b1a9bb6528eea66f78cf4a58aa
- SHA512
  
  a6c022f664e9bf0928cf10e7d89ffd860426527ed0922a4ffd8baef41aa9ff211b68dad205819875c1a810569cd73ea9625ea6b8b8e03a5244224f3e4829b784
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYC:o6RI1Fo/wT3cJYYYYYYYYYYYYC
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan