yunsip | 4e9370259e65d1de0223611bd1f05e09311b9b531e87beff3513c32f32447170 | Triage

Sharing

General

Target

JaffaCakes118_86117cb3309a99daa4bb6f55ab891ad7
Size

128KB
Sample

250203-jf1h4avmby
MD5

86117cb3309a99daa4bb6f55ab891ad7
SHA1

4a22da4c9cac784eb267dac15ce35829c033c1d7
SHA256

4e9370259e65d1de0223611bd1f05e09311b9b531e87beff3513c32f32447170
SHA512

ca49996798200e96329f01918eb593770b81bdb334d75141adb310432195bea25f2341d28fc26d901b3c6aebd19f54abd16b3626e3e29c15d6c6eeca2aa06c22
SSDEEP

3072:sAxv9I4I5saw3nI9sLVWGqeAzV2CdJSTBftoMY5dOf3QK:sAV9q5xw3nI+xboV2UJSTBlinsP

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_86117cb3309a99daa4bb6f55ab891ad7
- Size
  
  128KB
- MD5
  
  86117cb3309a99daa4bb6f55ab891ad7
- SHA1
  
  4a22da4c9cac784eb267dac15ce35829c033c1d7
- SHA256
  
  4e9370259e65d1de0223611bd1f05e09311b9b531e87beff3513c32f32447170
- SHA512
  
  ca49996798200e96329f01918eb593770b81bdb334d75141adb310432195bea25f2341d28fc26d901b3c6aebd19f54abd16b3626e3e29c15d6c6eeca2aa06c22
- SSDEEP
  
  3072:sAxv9I4I5saw3nI9sLVWGqeAzV2CdJSTBftoMY5dOf3QK:sAV9q5xw3nI+xboV2UJSTBlinsP
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan