yunsip | 712379e953307f5c7b4b50a4140ee9292364b3bf3798f6a7498c85c8fde3f01b | Triage

Sharing

General

Target

712379e953307f5c7b4b50a4140ee9292364b3bf3798f6a7498c85c8fde3f01b.exe
Size

730KB
Sample

241117-2eet4szfrp
MD5

5b0170cab844ea2636bb044fefa6539e
SHA1

a3803ded03384353293a4684007f70a9767f7922
SHA256

712379e953307f5c7b4b50a4140ee9292364b3bf3798f6a7498c85c8fde3f01b
SHA512

11db7b237d1846723eaa3af98a80b53717fb4fd16f26f2b66727a1aa3ae0e44abfe4ca9d6c513b6ea3b0dd141ecc22b821806dccd41dac57aeb81463c88e3e55
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY2:o6RI1Fo/wT3cJYYYYYYYYYYYY2

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  712379e953307f5c7b4b50a4140ee9292364b3bf3798f6a7498c85c8fde3f01b.exe
- Size
  
  730KB
- MD5
  
  5b0170cab844ea2636bb044fefa6539e
- SHA1
  
  a3803ded03384353293a4684007f70a9767f7922
- SHA256
  
  712379e953307f5c7b4b50a4140ee9292364b3bf3798f6a7498c85c8fde3f01b
- SHA512
  
  11db7b237d1846723eaa3af98a80b53717fb4fd16f26f2b66727a1aa3ae0e44abfe4ca9d6c513b6ea3b0dd141ecc22b821806dccd41dac57aeb81463c88e3e55
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY2:o6RI1Fo/wT3cJYYYYYYYYYYYY2
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan