yunsip | aa390521729f1865b325672122fb504b559e46e9211b82eb0f0ce43e00a85a08 | Triage

Sharing

General

Target

JaffaCakes118_78a219035ce59321c30c2297fb34dbdf
Size

171KB
Sample

250104-j6c6gssrfp
MD5

78a219035ce59321c30c2297fb34dbdf
SHA1

7565648f6f8fe67cc0684d39448f1ae8b878259c
SHA256

aa390521729f1865b325672122fb504b559e46e9211b82eb0f0ce43e00a85a08
SHA512

55f398da37f69b538189beb7d1ebcae9bab099ed3103c4d5a1245858f5fce6ec4c3ba3e73ecdf7396d881402ddb1843eb32f328fc9065707bbe56d2e282f0da4
SSDEEP

3072:o6pU5Y1DXnbMn7Uzkop61/dAzV2O3XwTBftrm2YedGf3QKZDx:o6C5AXbMn7UI1FoV2gwTBlrIckP/

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_78a219035ce59321c30c2297fb34dbdf
- Size
  
  171KB
- MD5
  
  78a219035ce59321c30c2297fb34dbdf
- SHA1
  
  7565648f6f8fe67cc0684d39448f1ae8b878259c
- SHA256
  
  aa390521729f1865b325672122fb504b559e46e9211b82eb0f0ce43e00a85a08
- SHA512
  
  55f398da37f69b538189beb7d1ebcae9bab099ed3103c4d5a1245858f5fce6ec4c3ba3e73ecdf7396d881402ddb1843eb32f328fc9065707bbe56d2e282f0da4
- SSDEEP
  
  3072:o6pU5Y1DXnbMn7Uzkop61/dAzV2O3XwTBftrm2YedGf3QKZDx:o6C5AXbMn7UI1FoV2gwTBlrIckP/
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan