yunsip | 15b43fb1a5ef9c33c1088b0846ee4459bbf5d940dc2c70c332960833891824b6 | Triage

Sharing

General

Target

15b43fb1a5ef9c33c1088b0846ee4459bbf5d940dc2c70c332960833891824b6N.exe
Size

729KB
Sample

241217-qrg98azpgt
MD5

fab2f5fb59076a466f80aa43bb47ef40
SHA1

d4ca1217deda9937c129241b0cf2f56749054ec2
SHA256

15b43fb1a5ef9c33c1088b0846ee4459bbf5d940dc2c70c332960833891824b6
SHA512

5964e84ff51f6f403c8530a372267f22c131b6e3cf0a5db14b996faa734a8e5ee1c7ff35ba9221aef31539c46e3a35a3c005c9e19c84815eef7494ec879f4466
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0U:jDgtfRQUHPw06MoV2nwTBlhm8c

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  15b43fb1a5ef9c33c1088b0846ee4459bbf5d940dc2c70c332960833891824b6N.exe
- Size
  
  729KB
- MD5
  
  fab2f5fb59076a466f80aa43bb47ef40
- SHA1
  
  d4ca1217deda9937c129241b0cf2f56749054ec2
- SHA256
  
  15b43fb1a5ef9c33c1088b0846ee4459bbf5d940dc2c70c332960833891824b6
- SHA512
  
  5964e84ff51f6f403c8530a372267f22c131b6e3cf0a5db14b996faa734a8e5ee1c7ff35ba9221aef31539c46e3a35a3c005c9e19c84815eef7494ec879f4466
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0U:jDgtfRQUHPw06MoV2nwTBlhm8c
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan