yunsip | f9f4173476445be2477c1da7afacf24c246d6e9eddaa719a05b0f5fcb19e0c76 | Triage

Sharing

General

Target

JaffaCakes118_646e6e642b6b0d585f4effa5518b60db
Size

330KB
Sample

250102-mkb8vaxqcw
MD5

646e6e642b6b0d585f4effa5518b60db
SHA1

c6ab908ef380c86ba6298f1102d719c4e1f09f6f
SHA256

f9f4173476445be2477c1da7afacf24c246d6e9eddaa719a05b0f5fcb19e0c76
SHA512

d0a6db56bc59b25bf4c1ad2e93154e403c44e377454f80fb1880ff8fab241d5d6315a4b9aa806c7a9376ef98966f6afb64b5bf4e0b638be241aacfff8248309f
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0s:jDgtfRQUHPw06MoV2nwTBlhm80

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_646e6e642b6b0d585f4effa5518b60db
- Size
  
  330KB
- MD5
  
  646e6e642b6b0d585f4effa5518b60db
- SHA1
  
  c6ab908ef380c86ba6298f1102d719c4e1f09f6f
- SHA256
  
  f9f4173476445be2477c1da7afacf24c246d6e9eddaa719a05b0f5fcb19e0c76
- SHA512
  
  d0a6db56bc59b25bf4c1ad2e93154e403c44e377454f80fb1880ff8fab241d5d6315a4b9aa806c7a9376ef98966f6afb64b5bf4e0b638be241aacfff8248309f
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0s:jDgtfRQUHPw06MoV2nwTBlhm80
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan