yunsip | 031ce523a492b08b8c68e3b685ebb886708e2ac5a9c8ae3df8b965756f1e82af | Triage

Sharing

General

Target

031ce523a492b08b8c68e3b685ebb886708e2ac5a9c8ae3df8b965756f1e82afN
Size

1.0MB
Sample

250113-p763vavpbr
MD5

d6dc0e8d6e5f7410f4a5ce2692fef060
SHA1

f0baf831e081e752aeb3dcb7c8d0927a89ad9015
SHA256

031ce523a492b08b8c68e3b685ebb886708e2ac5a9c8ae3df8b965756f1e82af
SHA512

eb50a88a8de58a32a7a1feeea887b51ebb61e9b3a1a0d70b2d90d39c2ddcbe4dc5d0b1fe7c1688389e4c110b317563262eac493c182c489c6f8e50bb2bb28172
SSDEEP

3072:o6pU5Y1DXnbMn7Uzkop61/dAzV2O3XwTBftrm2YedGf3QKZDh:o6C5AXbMn7UI1FoV2gwTBlrIckP3

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  031ce523a492b08b8c68e3b685ebb886708e2ac5a9c8ae3df8b965756f1e82afN
- Size
  
  1.0MB
- MD5
  
  d6dc0e8d6e5f7410f4a5ce2692fef060
- SHA1
  
  f0baf831e081e752aeb3dcb7c8d0927a89ad9015
- SHA256
  
  031ce523a492b08b8c68e3b685ebb886708e2ac5a9c8ae3df8b965756f1e82af
- SHA512
  
  eb50a88a8de58a32a7a1feeea887b51ebb61e9b3a1a0d70b2d90d39c2ddcbe4dc5d0b1fe7c1688389e4c110b317563262eac493c182c489c6f8e50bb2bb28172
- SSDEEP
  
  3072:o6pU5Y1DXnbMn7Uzkop61/dAzV2O3XwTBftrm2YedGf3QKZDh:o6C5AXbMn7UI1FoV2gwTBlrIckP3
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan