yunsip | 99d447432f1d5a6be91c60022a25d6930a72efedd19ad5c2a2ab1af4d177162f | Triage

Sharing

General

Target

99d447432f1d5a6be91c60022a25d6930a72efedd19ad5c2a2ab1af4d177162f
Size

521KB
Sample

250219-eb2s5sykt4
MD5

ed87530a5deaa922d2911d2679b8de1d
SHA1

709a57d08b64d2af539bb6953495df003085dee9
SHA256

99d447432f1d5a6be91c60022a25d6930a72efedd19ad5c2a2ab1af4d177162f
SHA512

5e28b5088f371448e216065b989fe7cf54f981b4f7b0ee635f8d18c3f7de89bf85ad274ac744e95cef9cc5c510a91cf6f700e19b0537833be62a43be362cb2d3
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0f:jDgtfRQUHPw06MoV2nwTBlhm8n

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  99d447432f1d5a6be91c60022a25d6930a72efedd19ad5c2a2ab1af4d177162f
- Size
  
  521KB
- MD5
  
  ed87530a5deaa922d2911d2679b8de1d
- SHA1
  
  709a57d08b64d2af539bb6953495df003085dee9
- SHA256
  
  99d447432f1d5a6be91c60022a25d6930a72efedd19ad5c2a2ab1af4d177162f
- SHA512
  
  5e28b5088f371448e216065b989fe7cf54f981b4f7b0ee635f8d18c3f7de89bf85ad274ac744e95cef9cc5c510a91cf6f700e19b0537833be62a43be362cb2d3
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0f:jDgtfRQUHPw06MoV2nwTBlhm8n
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan