yunsip | 678133354a1edd1d2b74801bbb1b73f1561acf51d0cb4f6997b4c7a3b64d3bfb | Triage

Sharing

General

Target

678133354a1edd1d2b74801bbb1b73f1561acf51d0cb4f6997b4c7a3b64d3bfb.exe
Size

721KB
Sample

241206-1qestazjav
MD5

5f927f39e188d414453ff295b518be6c
SHA1

f54aa6ed75eafed47b09cac0bbb507f05db07f19
SHA256

678133354a1edd1d2b74801bbb1b73f1561acf51d0cb4f6997b4c7a3b64d3bfb
SHA512

cabdf432e9c230b16b5a54f102449c7a566bbd62fb6d9fc284138f445f0ee7a623090aefb2627aaee6f93052135dedae8ee8dd78a1966645b16c2b5958404c52
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY3:o6RI1Fo/wT3cJYYYYYYYYYYYY3

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  678133354a1edd1d2b74801bbb1b73f1561acf51d0cb4f6997b4c7a3b64d3bfb.exe
- Size
  
  721KB
- MD5
  
  5f927f39e188d414453ff295b518be6c
- SHA1
  
  f54aa6ed75eafed47b09cac0bbb507f05db07f19
- SHA256
  
  678133354a1edd1d2b74801bbb1b73f1561acf51d0cb4f6997b4c7a3b64d3bfb
- SHA512
  
  cabdf432e9c230b16b5a54f102449c7a566bbd62fb6d9fc284138f445f0ee7a623090aefb2627aaee6f93052135dedae8ee8dd78a1966645b16c2b5958404c52
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYY3:o6RI1Fo/wT3cJYYYYYYYYYYYY3
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan