yunsip | 5c40c14839d2e496a64d92c9ba8c3ce09ec2ca16550a82a31440c5e9bcbe5f25 | Triage

Sharing

General

Target

5c40c14839d2e496a64d92c9ba8c3ce09ec2ca16550a82a31440c5e9bcbe5f25.exe
Size

747KB
Sample

241219-kh133sxnek
MD5

7e7636134d76db1260d814cb02834fa8
SHA1

89caa722089c0963e2d163e3aac4c0a2ac37e79c
SHA256

5c40c14839d2e496a64d92c9ba8c3ce09ec2ca16550a82a31440c5e9bcbe5f25
SHA512

b20836fb3daef9c55a607905390bdd334b6998472590d4a551962609c89565d7f1f548c21ff5f4587026537dd152bd5ea96d1fe64f8edfc3f71c6f957481dca4
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYP:o6RI1Fo/wT3cJYYYYYYYYYYYYP

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  5c40c14839d2e496a64d92c9ba8c3ce09ec2ca16550a82a31440c5e9bcbe5f25.exe
- Size
  
  747KB
- MD5
  
  7e7636134d76db1260d814cb02834fa8
- SHA1
  
  89caa722089c0963e2d163e3aac4c0a2ac37e79c
- SHA256
  
  5c40c14839d2e496a64d92c9ba8c3ce09ec2ca16550a82a31440c5e9bcbe5f25
- SHA512
  
  b20836fb3daef9c55a607905390bdd334b6998472590d4a551962609c89565d7f1f548c21ff5f4587026537dd152bd5ea96d1fe64f8edfc3f71c6f957481dca4
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYP:o6RI1Fo/wT3cJYYYYYYYYYYYYP
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan