yunsip | 3aee43e3ac120503917731731a77b675a0761c49ebbc03ff7d4ff91b3c33efcc | Triage

Sharing

General

Target

3aee43e3ac120503917731731a77b675a0761c49ebbc03ff7d4ff91b3c33efcc
Size

1.2MB
Sample

250118-2y3ehsylap
MD5

8399d51d121d448b8abf7c35e48fce0f
SHA1

2ac652f519ae716d1287b56f32900b16feafabb2
SHA256

3aee43e3ac120503917731731a77b675a0761c49ebbc03ff7d4ff91b3c33efcc
SHA512

da179217e3ee30f08e891452f2ccd75a586f3466e3f699c0024880a4e2dea6c08bd16a15288530f30203a2e724365442f0624e60009b7c5610ca8c89d14c1079
SSDEEP

6144:jDgtfRQUHPw06MoV2nwTBlhm8zDgtfRQUHPw06MoV2nwTBlhm8y:jDgN6MoIwT3vDgN6MoIwT3e

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  3aee43e3ac120503917731731a77b675a0761c49ebbc03ff7d4ff91b3c33efcc
- Size
  
  1.2MB
- MD5
  
  8399d51d121d448b8abf7c35e48fce0f
- SHA1
  
  2ac652f519ae716d1287b56f32900b16feafabb2
- SHA256
  
  3aee43e3ac120503917731731a77b675a0761c49ebbc03ff7d4ff91b3c33efcc
- SHA512
  
  da179217e3ee30f08e891452f2ccd75a586f3466e3f699c0024880a4e2dea6c08bd16a15288530f30203a2e724365442f0624e60009b7c5610ca8c89d14c1079
- SSDEEP
  
  6144:jDgtfRQUHPw06MoV2nwTBlhm8zDgtfRQUHPw06MoV2nwTBlhm8y:jDgN6MoIwT3vDgN6MoIwT3e
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan