yunsip | 0dfd4aa23931ddcfa686fa6d79648cfbb86f652d672e3bdf74620028a906def6 | Triage

Sharing

General

Target

JaffaCakes118_101b9103884266efdbc25f91dae2b9d2
Size

323KB
Sample

250221-elmf7ssldw
MD5

101b9103884266efdbc25f91dae2b9d2
SHA1

cfc7e383140cc5e4362da1462b13a00c7c9da680
SHA256

0dfd4aa23931ddcfa686fa6d79648cfbb86f652d672e3bdf74620028a906def6
SHA512

c82d1ed981d9e2b1b63bf2eb390146b53f8f1781b01c7d70129e9ebb0705bfc8521c6c54b41cb0fa8882c9836603c3fd4a4cdf8ffaf74ed6c92e7e456fa0a68b
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0S:jDgtfRQUHPw06MoV2nwTBlhm8K

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_101b9103884266efdbc25f91dae2b9d2
- Size
  
  323KB
- MD5
  
  101b9103884266efdbc25f91dae2b9d2
- SHA1
  
  cfc7e383140cc5e4362da1462b13a00c7c9da680
- SHA256
  
  0dfd4aa23931ddcfa686fa6d79648cfbb86f652d672e3bdf74620028a906def6
- SHA512
  
  c82d1ed981d9e2b1b63bf2eb390146b53f8f1781b01c7d70129e9ebb0705bfc8521c6c54b41cb0fa8882c9836603c3fd4a4cdf8ffaf74ed6c92e7e456fa0a68b
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0S:jDgtfRQUHPw06MoV2nwTBlhm8K
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan