yunsip | 70b855a6bd2ba71dd212fdf9db973452d40e73bb06dd6db5a65ca3aa8a075132 | Triage

Sharing

General

Target

70b855a6bd2ba71dd212fdf9db973452d40e73bb06dd6db5a65ca3aa8a075132N.exe
Size

832KB
Sample

250112-wtyb4ssqfw
MD5

9c01477468a0e3ba20ccb48cf80603a0
SHA1

8250934677220ceae887d1768690cc4c6fb56b4a
SHA256

70b855a6bd2ba71dd212fdf9db973452d40e73bb06dd6db5a65ca3aa8a075132
SHA512

5c026d2b670a524e959a4f46e6b7853c7056d8809c18698f98e47195a5dd03931962207309d1a7c3f437f64f9e437c74946916394731209f8b8aca90b1e34d7d
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q03:jDgtfRQUHPw06MoV2nwTBlhm8v

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  70b855a6bd2ba71dd212fdf9db973452d40e73bb06dd6db5a65ca3aa8a075132N.exe
- Size
  
  832KB
- MD5
  
  9c01477468a0e3ba20ccb48cf80603a0
- SHA1
  
  8250934677220ceae887d1768690cc4c6fb56b4a
- SHA256
  
  70b855a6bd2ba71dd212fdf9db973452d40e73bb06dd6db5a65ca3aa8a075132
- SHA512
  
  5c026d2b670a524e959a4f46e6b7853c7056d8809c18698f98e47195a5dd03931962207309d1a7c3f437f64f9e437c74946916394731209f8b8aca90b1e34d7d
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q03:jDgtfRQUHPw06MoV2nwTBlhm8v
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan