yunsip | e948a377fc14f85a181fbe1beb93027cc3acbe32ef1cf0a4abe2c57fc9963cb3 | Triage

Sharing

General

Target

e948a377fc14f85a181fbe1beb93027cc3acbe32ef1cf0a4abe2c57fc9963cb3N.exe
Size

1.1MB
Sample

250102-jnnjhatrdq
MD5

87a4de1b7ef15a5b3569a19fb1032570
SHA1

6e7852e81f82132ed45edaf64a01a82630fe465c
SHA256

e948a377fc14f85a181fbe1beb93027cc3acbe32ef1cf0a4abe2c57fc9963cb3
SHA512

c62f41ac73d64b7035e2a0721894c2735deb585339840c008e720c7148977c94c0bde0716330da5b7364287ecc1a9c7055a69640f450133a053001272e0e8671
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYl:o6RI1Fo/wT3cJYYYYYYYYYYYYl

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  e948a377fc14f85a181fbe1beb93027cc3acbe32ef1cf0a4abe2c57fc9963cb3N.exe
- Size
  
  1.1MB
- MD5
  
  87a4de1b7ef15a5b3569a19fb1032570
- SHA1
  
  6e7852e81f82132ed45edaf64a01a82630fe465c
- SHA256
  
  e948a377fc14f85a181fbe1beb93027cc3acbe32ef1cf0a4abe2c57fc9963cb3
- SHA512
  
  c62f41ac73d64b7035e2a0721894c2735deb585339840c008e720c7148977c94c0bde0716330da5b7364287ecc1a9c7055a69640f450133a053001272e0e8671
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYl:o6RI1Fo/wT3cJYYYYYYYYYYYYl
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan