yunsip | 798d65ba837e71c4c4549206285aaa91e5c20ce37a22471782cbf0786bb52998 | Triage

Sharing

General

Target

798d65ba837e71c4c4549206285aaa91e5c20ce37a22471782cbf0786bb52998N.exe
Size

807KB
Sample

241216-ggjkvsykcl
MD5

9bce3ce4593855c2a29579b039d85400
SHA1

e0e2b71812969496372a6b25564a3c7a2f79a219
SHA256

798d65ba837e71c4c4549206285aaa91e5c20ce37a22471782cbf0786bb52998
SHA512

09778cf3a81644871473d41cb2a148be6f9c029ce7c91c0cfa0b37de03f4b6f130c6f44d237df3bef1400a754dc0dd42bf2911a8e5c691338153573ab9430a21
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0T:jDgtfRQUHPw06MoV2nwTBlhm87

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  798d65ba837e71c4c4549206285aaa91e5c20ce37a22471782cbf0786bb52998N.exe
- Size
  
  807KB
- MD5
  
  9bce3ce4593855c2a29579b039d85400
- SHA1
  
  e0e2b71812969496372a6b25564a3c7a2f79a219
- SHA256
  
  798d65ba837e71c4c4549206285aaa91e5c20ce37a22471782cbf0786bb52998
- SHA512
  
  09778cf3a81644871473d41cb2a148be6f9c029ce7c91c0cfa0b37de03f4b6f130c6f44d237df3bef1400a754dc0dd42bf2911a8e5c691338153573ab9430a21
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0T:jDgtfRQUHPw06MoV2nwTBlhm87
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan