yunsip | f23b610f7b1f3ff78f5cbc74f18810affb42885aee2fe595676716fc5544aeb3 | Triage

Sharing

General

Target

JaffaCakes118_69303232c54d8f33da5f5a1d3bb8bbd0
Size

594KB
Sample

250103-a1anqsvqcl
MD5

69303232c54d8f33da5f5a1d3bb8bbd0
SHA1

b8f0ea33878560c85177dd023e17b973e65e67c0
SHA256

f23b610f7b1f3ff78f5cbc74f18810affb42885aee2fe595676716fc5544aeb3
SHA512

bc8da88433f830d8331466fde6011bedaab5cff3fbb1631e77d0a172561c57dad4822edc6976345f15cd0f50c0958abcfa98fbdbb684ca8a9cb41a278f281506
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q07:jDgtfRQUHPw06MoV2nwTBlhm8D

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_69303232c54d8f33da5f5a1d3bb8bbd0
- Size
  
  594KB
- MD5
  
  69303232c54d8f33da5f5a1d3bb8bbd0
- SHA1
  
  b8f0ea33878560c85177dd023e17b973e65e67c0
- SHA256
  
  f23b610f7b1f3ff78f5cbc74f18810affb42885aee2fe595676716fc5544aeb3
- SHA512
  
  bc8da88433f830d8331466fde6011bedaab5cff3fbb1631e77d0a172561c57dad4822edc6976345f15cd0f50c0958abcfa98fbdbb684ca8a9cb41a278f281506
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q07:jDgtfRQUHPw06MoV2nwTBlhm8D
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan