yunsip | b1b3d930ef33c60c98751534b3bba1990dc83585bb1d189fc1b023086a63cfa3 | Triage

Sharing

General

Target

b1b3d930ef33c60c98751534b3bba1990dc83585bb1d189fc1b023086a63cfa3.exe
Size

732KB
Sample

241117-v1eb5svdrk
MD5

b66b6df872f208c9c8bb547dbd3ce0e7
SHA1

f37812528b55d65722aaf3df514b620316132b15
SHA256

b1b3d930ef33c60c98751534b3bba1990dc83585bb1d189fc1b023086a63cfa3
SHA512

ec34f535202496ab206df9070d6a7e945f423509a42dc576e664625b206f6fafaac4a92cc2f7719ab8c7b11e50cc427f4b925dda94e7d7c6ac76f5c2e16528f6
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0V:jDgtfRQUHPw06MoV2nwTBlhm8N

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  b1b3d930ef33c60c98751534b3bba1990dc83585bb1d189fc1b023086a63cfa3.exe
- Size
  
  732KB
- MD5
  
  b66b6df872f208c9c8bb547dbd3ce0e7
- SHA1
  
  f37812528b55d65722aaf3df514b620316132b15
- SHA256
  
  b1b3d930ef33c60c98751534b3bba1990dc83585bb1d189fc1b023086a63cfa3
- SHA512
  
  ec34f535202496ab206df9070d6a7e945f423509a42dc576e664625b206f6fafaac4a92cc2f7719ab8c7b11e50cc427f4b925dda94e7d7c6ac76f5c2e16528f6
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0V:jDgtfRQUHPw06MoV2nwTBlhm8N
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan