yunsip | 3350599a61b51a209b452afd3ea23a3cc6663f6992f120f91ed94594e01b6bcf | Triage

Sharing

General

Target

3350599a61b51a209b452afd3ea23a3cc6663f6992f120f91ed94594e01b6bcf
Size

986KB
Sample

241123-z2x8vstjbl
MD5

59aae6b34f2fb9ad12c2c06de591b157
SHA1

2c87f41bcd4a0c79864554804e32491c936badb6
SHA256

3350599a61b51a209b452afd3ea23a3cc6663f6992f120f91ed94594e01b6bcf
SHA512

2fca798858adf9bf181e53eb7105e7f503f8f10eb5922b823c4c7199b327ebd235bb82a8358fd8885a7c319fbdef5306f1934e1210d7638592c584eab34517f1
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q07:jDgtfRQUHPw06MoV2nwTBlhm8T

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  3350599a61b51a209b452afd3ea23a3cc6663f6992f120f91ed94594e01b6bcf
- Size
  
  986KB
- MD5
  
  59aae6b34f2fb9ad12c2c06de591b157
- SHA1
  
  2c87f41bcd4a0c79864554804e32491c936badb6
- SHA256
  
  3350599a61b51a209b452afd3ea23a3cc6663f6992f120f91ed94594e01b6bcf
- SHA512
  
  2fca798858adf9bf181e53eb7105e7f503f8f10eb5922b823c4c7199b327ebd235bb82a8358fd8885a7c319fbdef5306f1934e1210d7638592c584eab34517f1
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q07:jDgtfRQUHPw06MoV2nwTBlhm8T
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan