yunsip | d6dcbbe5daa1549f915650e9e3c34e8b3c1e014567f3a4a4c3449b0434d90e93 | Triage

Sharing

General

Target

d6dcbbe5daa1549f915650e9e3c34e8b3c1e014567f3a4a4c3449b0434d90e93
Size

669KB
Sample

250103-epqb9synev
MD5

c0946399abd10367fb3cb232c827f195
SHA1

3bcf9289802fccf37eb20800a1f6f660ad6dbc01
SHA256

d6dcbbe5daa1549f915650e9e3c34e8b3c1e014567f3a4a4c3449b0434d90e93
SHA512

ebfed317861615d7fcbebe2f1055b9bf851e4df297e00b06f783fde9fe4a0823f99457023639109f7064a11e495771e7d424d14ade6f11f59e3d4c8e995dc938
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0J:jDgtfRQUHPw06MoV2nwTBlhm8B

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  d6dcbbe5daa1549f915650e9e3c34e8b3c1e014567f3a4a4c3449b0434d90e93
- Size
  
  669KB
- MD5
  
  c0946399abd10367fb3cb232c827f195
- SHA1
  
  3bcf9289802fccf37eb20800a1f6f660ad6dbc01
- SHA256
  
  d6dcbbe5daa1549f915650e9e3c34e8b3c1e014567f3a4a4c3449b0434d90e93
- SHA512
  
  ebfed317861615d7fcbebe2f1055b9bf851e4df297e00b06f783fde9fe4a0823f99457023639109f7064a11e495771e7d424d14ade6f11f59e3d4c8e995dc938
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0J:jDgtfRQUHPw06MoV2nwTBlhm8B
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan