yunsip | 1716d70321717098882dae5ba5bfbc0365bf031e3faeda932f592ecbcd6c9c37 | Triage

Sharing

General

Target

1716d70321717098882dae5ba5bfbc0365bf031e3faeda932f592ecbcd6c9c37
Size

1.0MB
Sample

241216-y2n5hszjbs
MD5

0b35817c94400e80b636670b3ab831df
SHA1

6efa9d415f382b9e94eead3b8f9823f9d16fae2a
SHA256

1716d70321717098882dae5ba5bfbc0365bf031e3faeda932f592ecbcd6c9c37
SHA512

0f70f7e8b58a3f71c0dc4fcc5eceba3a99197da88f7dee88aed03516c1a6dc0918e396060f5dd2bf6bc08659a7b5d6d9a18226b145ecf2eef2c41d2431dbd7f7
SSDEEP

3072:o6pU5Y1DXnbMn7Uzkop61/dAzV2O3XwTBftrm2YedGf3QKZDJ:o6C5AXbMn7UI1FoV2gwTBlrIckP/

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  1716d70321717098882dae5ba5bfbc0365bf031e3faeda932f592ecbcd6c9c37
- Size
  
  1.0MB
- MD5
  
  0b35817c94400e80b636670b3ab831df
- SHA1
  
  6efa9d415f382b9e94eead3b8f9823f9d16fae2a
- SHA256
  
  1716d70321717098882dae5ba5bfbc0365bf031e3faeda932f592ecbcd6c9c37
- SHA512
  
  0f70f7e8b58a3f71c0dc4fcc5eceba3a99197da88f7dee88aed03516c1a6dc0918e396060f5dd2bf6bc08659a7b5d6d9a18226b145ecf2eef2c41d2431dbd7f7
- SSDEEP
  
  3072:o6pU5Y1DXnbMn7Uzkop61/dAzV2O3XwTBftrm2YedGf3QKZDJ:o6C5AXbMn7UI1FoV2gwTBlrIckP/
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan