yunsip | 423d3f788383828a81ce281bbc1636b13b0c7b270af3556b70272ef891846f3a | Triage

Sharing

General

Target

423d3f788383828a81ce281bbc1636b13b0c7b270af3556b70272ef891846f3aN.exe
Size

932KB
Sample

241216-c23r1szkft
MD5

04501b94b4a876df02420a1e609430f0
SHA1

01ce74063af3046b3dc0c246d252d51e841f5bc2
SHA256

423d3f788383828a81ce281bbc1636b13b0c7b270af3556b70272ef891846f3a
SHA512

4eeb3c91b89a0cd642f50d087b95a89663f481c0ae6dc95d3b880e80ddfe77976f1eed3fe38b4ca565706aef66c9119483f0edbec48181a10ff363f80bcf7e95
SSDEEP

6144:jDgtfRQUHPw06MoV2nwTBlhm8zDgtfRQUHPw06MoV2nwTBlhm8j:jDgN6MoIwT3vDgN6MoIwT3P

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  423d3f788383828a81ce281bbc1636b13b0c7b270af3556b70272ef891846f3aN.exe
- Size
  
  932KB
- MD5
  
  04501b94b4a876df02420a1e609430f0
- SHA1
  
  01ce74063af3046b3dc0c246d252d51e841f5bc2
- SHA256
  
  423d3f788383828a81ce281bbc1636b13b0c7b270af3556b70272ef891846f3a
- SHA512
  
  4eeb3c91b89a0cd642f50d087b95a89663f481c0ae6dc95d3b880e80ddfe77976f1eed3fe38b4ca565706aef66c9119483f0edbec48181a10ff363f80bcf7e95
- SSDEEP
  
  6144:jDgtfRQUHPw06MoV2nwTBlhm8zDgtfRQUHPw06MoV2nwTBlhm8j:jDgN6MoIwT3vDgN6MoIwT3P
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan