yunsip | f53b45defd68ff09b608c1a27803d2794686315c5fb55bac7e316a9a475ca7a8 | Triage

Sharing

General

Target

f53b45defd68ff09b608c1a27803d2794686315c5fb55bac7e316a9a475ca7a8.exe
Size

838KB
Sample

250112-v9x6lssjcw
MD5

05de8e1ad9694d45a3b9a166aea46265
SHA1

336adddaa016be646bd04a4e181ec77895ed92c7
SHA256

f53b45defd68ff09b608c1a27803d2794686315c5fb55bac7e316a9a475ca7a8
SHA512

cd38c3ca8c9ec18d96a33aacfa59499998659fe23d02ec3bfe0e3118ec9a46d48f88fef1278c87ade7f187dd9ad1ce2df273ee3325b7a0aa1b3e6edbb6518157
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0a:jDgtfRQUHPw06MoV2nwTBlhm8i

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  f53b45defd68ff09b608c1a27803d2794686315c5fb55bac7e316a9a475ca7a8.exe
- Size
  
  838KB
- MD5
  
  05de8e1ad9694d45a3b9a166aea46265
- SHA1
  
  336adddaa016be646bd04a4e181ec77895ed92c7
- SHA256
  
  f53b45defd68ff09b608c1a27803d2794686315c5fb55bac7e316a9a475ca7a8
- SHA512
  
  cd38c3ca8c9ec18d96a33aacfa59499998659fe23d02ec3bfe0e3118ec9a46d48f88fef1278c87ade7f187dd9ad1ce2df273ee3325b7a0aa1b3e6edbb6518157
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0a:jDgtfRQUHPw06MoV2nwTBlhm8i
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan