yunsip | dfa623e827be43956a92bb23d41e7fd35781075eabba8d849b5f9c47b8d0cde4 | Triage

Sharing

General

Target

dfa623e827be43956a92bb23d41e7fd35781075eabba8d849b5f9c47b8d0cde4.exe
Size

833KB
Sample

250110-yfx6astrdw
MD5

04b73c24bdb8d51a03c23a4e8704fdf8
SHA1

4bbb4ed69460295ebb29a21e00136b426a9e6f03
SHA256

dfa623e827be43956a92bb23d41e7fd35781075eabba8d849b5f9c47b8d0cde4
SHA512

d583b64b1fcba5abc22244a6e35033da387db91033ca45496314757e1fca6cc3ad1fadff24ca9b0026c8a4486834e63b080cc63a9f8016ce2746de95409a234e
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0N:jDgtfRQUHPw06MoV2nwTBlhm8V

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  dfa623e827be43956a92bb23d41e7fd35781075eabba8d849b5f9c47b8d0cde4.exe
- Size
  
  833KB
- MD5
  
  04b73c24bdb8d51a03c23a4e8704fdf8
- SHA1
  
  4bbb4ed69460295ebb29a21e00136b426a9e6f03
- SHA256
  
  dfa623e827be43956a92bb23d41e7fd35781075eabba8d849b5f9c47b8d0cde4
- SHA512
  
  d583b64b1fcba5abc22244a6e35033da387db91033ca45496314757e1fca6cc3ad1fadff24ca9b0026c8a4486834e63b080cc63a9f8016ce2746de95409a234e
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0N:jDgtfRQUHPw06MoV2nwTBlhm8V
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan