yunsip | da366ab0e0f24bade84ba74138da2f2289b084220d2b694c3fb999058b5e262c | Triage

Sharing

General

Target

da366ab0e0f24bade84ba74138da2f2289b084220d2b694c3fb999058b5e262cN.exe
Size

787KB
Sample

241121-vzaybstpfy
MD5

457c5dc7ec46290a656e6937c4c156f0
SHA1

4dce88f62fc8381636b5a4db0065fb0cdcac181c
SHA256

da366ab0e0f24bade84ba74138da2f2289b084220d2b694c3fb999058b5e262c
SHA512

f6ee73f88aa5904ab63e03339d99799428cab72fd121f45d1fdb37cd3f950e467d79a295da74c0f29e348e9a2fe20ad5903faba10a510143d62c301590147f6f
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0+:jDgtfRQUHPw06MoV2nwTBlhm82

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  da366ab0e0f24bade84ba74138da2f2289b084220d2b694c3fb999058b5e262cN.exe
- Size
  
  787KB
- MD5
  
  457c5dc7ec46290a656e6937c4c156f0
- SHA1
  
  4dce88f62fc8381636b5a4db0065fb0cdcac181c
- SHA256
  
  da366ab0e0f24bade84ba74138da2f2289b084220d2b694c3fb999058b5e262c
- SHA512
  
  f6ee73f88aa5904ab63e03339d99799428cab72fd121f45d1fdb37cd3f950e467d79a295da74c0f29e348e9a2fe20ad5903faba10a510143d62c301590147f6f
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0+:jDgtfRQUHPw06MoV2nwTBlhm82
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan