yunsip | 21fc42aa4e1bbd6fccd8d5be1ba5dd418404181a4bd322ac9a1b7b14b00e30fe | Triage

Sharing

General

Target

JaffaCakes118_69a65e4dcce7d3b5327be426260472a0
Size

529KB
Sample

250103-cvm3zsylcm
MD5

69a65e4dcce7d3b5327be426260472a0
SHA1

4840ed236ff913c9263e206c27001f35f711e62a
SHA256

21fc42aa4e1bbd6fccd8d5be1ba5dd418404181a4bd322ac9a1b7b14b00e30fe
SHA512

30041d3037ea90b62efc69e01bf202b03ad5875824a8ff2982406a68df5439374915c77039f702cf82a4ac204bf200b31bd7e77ae5e6bfd72e75ab29b79e33b1
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0t:jDgtfRQUHPw06MoV2nwTBlhm8l

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_69a65e4dcce7d3b5327be426260472a0
- Size
  
  529KB
- MD5
  
  69a65e4dcce7d3b5327be426260472a0
- SHA1
  
  4840ed236ff913c9263e206c27001f35f711e62a
- SHA256
  
  21fc42aa4e1bbd6fccd8d5be1ba5dd418404181a4bd322ac9a1b7b14b00e30fe
- SHA512
  
  30041d3037ea90b62efc69e01bf202b03ad5875824a8ff2982406a68df5439374915c77039f702cf82a4ac204bf200b31bd7e77ae5e6bfd72e75ab29b79e33b1
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0t:jDgtfRQUHPw06MoV2nwTBlhm8l
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan