yunsip | 639b8eaeeb124a1f4da349397791935cfba483f828d8315b2da8fa869dd5c997 | Triage

Sharing

General

Target

639b8eaeeb124a1f4da349397791935cfba483f828d8315b2da8fa869dd5c997
Size

841KB
Sample

250108-bnn62axnes
MD5

9fa73c79d66c1aaf541f9d4478a6a2ca
SHA1

0be38305594e338e36da1e8f4901c87bafa24091
SHA256

639b8eaeeb124a1f4da349397791935cfba483f828d8315b2da8fa869dd5c997
SHA512

e02bffa2b6d471e2e6c6c55f0ff2e8655d4f741061088b011c18a45931808602530cee97a486a643fca6234ee9037fe1a7938da81e596dfd4f50751f3d6303ff
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q01:jDgtfRQUHPw06MoV2nwTBlhm8N

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  639b8eaeeb124a1f4da349397791935cfba483f828d8315b2da8fa869dd5c997
- Size
  
  841KB
- MD5
  
  9fa73c79d66c1aaf541f9d4478a6a2ca
- SHA1
  
  0be38305594e338e36da1e8f4901c87bafa24091
- SHA256
  
  639b8eaeeb124a1f4da349397791935cfba483f828d8315b2da8fa869dd5c997
- SHA512
  
  e02bffa2b6d471e2e6c6c55f0ff2e8655d4f741061088b011c18a45931808602530cee97a486a643fca6234ee9037fe1a7938da81e596dfd4f50751f3d6303ff
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q01:jDgtfRQUHPw06MoV2nwTBlhm8N
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan