yunsip | 66b3baa6408193b5119a4ee5a91499437a0b4ce8c1bab0509960a3ee465f2760 | Triage

Sharing

General

Target

66b3baa6408193b5119a4ee5a91499437a0b4ce8c1bab0509960a3ee465f2760
Size

600KB
Sample

250122-ct8cjasrez
MD5

973730150a09e74de859791756936365
SHA1

19b2661f358e1ac0b252c5028448287635d53191
SHA256

66b3baa6408193b5119a4ee5a91499437a0b4ce8c1bab0509960a3ee465f2760
SHA512

37e0ddc22aea9c20e2825adee5d9dd01f1aca8026f45742e880ed2eae3e4dea0c4b95dde2a5026abc57090f624e5adb51b369136503771cda1369ca9d038d160
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q07:jDgtfRQUHPw06MoV2nwTBlhm8j

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  66b3baa6408193b5119a4ee5a91499437a0b4ce8c1bab0509960a3ee465f2760
- Size
  
  600KB
- MD5
  
  973730150a09e74de859791756936365
- SHA1
  
  19b2661f358e1ac0b252c5028448287635d53191
- SHA256
  
  66b3baa6408193b5119a4ee5a91499437a0b4ce8c1bab0509960a3ee465f2760
- SHA512
  
  37e0ddc22aea9c20e2825adee5d9dd01f1aca8026f45742e880ed2eae3e4dea0c4b95dde2a5026abc57090f624e5adb51b369136503771cda1369ca9d038d160
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q07:jDgtfRQUHPw06MoV2nwTBlhm8j
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan