yunsip | 4648630889ae4e3ac11ffeb0b7f31e53a0c69e8de90da43d886f482536cfabc0 | Triage

Sharing

General

Target

JaffaCakes118_778d65bdb5b29966600cfe7b030164f0
Size

419KB
Sample

250104-esls9a1kgy
MD5

778d65bdb5b29966600cfe7b030164f0
SHA1

f7743932cfeb67885126a53ffa5f8d2583a08451
SHA256

4648630889ae4e3ac11ffeb0b7f31e53a0c69e8de90da43d886f482536cfabc0
SHA512

036640bb477d8a38b38d1e882bd8312268efb959871c47a2785615d394d05d7e32aece6a5409ec8dc5b3b6f0cfe004c65f28a782bc55f88259d689ca34b0bebc
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0R:jDgtfRQUHPw06MoV2nwTBlhm8p

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_778d65bdb5b29966600cfe7b030164f0
- Size
  
  419KB
- MD5
  
  778d65bdb5b29966600cfe7b030164f0
- SHA1
  
  f7743932cfeb67885126a53ffa5f8d2583a08451
- SHA256
  
  4648630889ae4e3ac11ffeb0b7f31e53a0c69e8de90da43d886f482536cfabc0
- SHA512
  
  036640bb477d8a38b38d1e882bd8312268efb959871c47a2785615d394d05d7e32aece6a5409ec8dc5b3b6f0cfe004c65f28a782bc55f88259d689ca34b0bebc
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0R:jDgtfRQUHPw06MoV2nwTBlhm8p
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan