yunsip | 3de9747c3cc5cf2c07f01313ac67e8db3d6cf97b2ccdd06dbbbe507ea5cf8c2a | Triage

Sharing

General

Target

3de9747c3cc5cf2c07f01313ac67e8db3d6cf97b2ccdd06dbbbe507ea5cf8c2a
Size

745KB
Sample

250218-1xc8kasjw3
MD5

3f9f473314b462cc5de608d786ec4f9f
SHA1

bb4d280a50624150eac24169b08f4dc7cba10fd7
SHA256

3de9747c3cc5cf2c07f01313ac67e8db3d6cf97b2ccdd06dbbbe507ea5cf8c2a
SHA512

39c2ffd0b9f466c78ce4ea42344fc9a46dd157b017adbc40e9229347cc47450342468ad4c046a15bc68e567c2d854aebd493d2fd6222c3ed2bd70d563a43e5fb
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYf:o6RI1Fo/wT3cJYYYYYYYYYYYYf

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  3de9747c3cc5cf2c07f01313ac67e8db3d6cf97b2ccdd06dbbbe507ea5cf8c2a
- Size
  
  745KB
- MD5
  
  3f9f473314b462cc5de608d786ec4f9f
- SHA1
  
  bb4d280a50624150eac24169b08f4dc7cba10fd7
- SHA256
  
  3de9747c3cc5cf2c07f01313ac67e8db3d6cf97b2ccdd06dbbbe507ea5cf8c2a
- SHA512
  
  39c2ffd0b9f466c78ce4ea42344fc9a46dd157b017adbc40e9229347cc47450342468ad4c046a15bc68e567c2d854aebd493d2fd6222c3ed2bd70d563a43e5fb
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYf:o6RI1Fo/wT3cJYYYYYYYYYYYYf
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan