yunsip | 1688a40c93a8e429d40310c272b1dfa6f24e9df1e4691e8b0c2f9afb0c00ce1d | Triage

Sharing

General

Target

JaffaCakes118_1a76c4556f4391e33bc6d56193307843
Size

341KB
Sample

250222-sk3zfssldl
MD5

1a76c4556f4391e33bc6d56193307843
SHA1

8294183d7e3bc181233ad26aaadcf2731ebc7dc0
SHA256

1688a40c93a8e429d40310c272b1dfa6f24e9df1e4691e8b0c2f9afb0c00ce1d
SHA512

628b447b2799aeb6155505a505bb7fa644ec2fc4d33f46aaca324377232e9d785cadee35241c31c0008be6cf9ee12b7af53728055b33a240648dd194f6f4814c
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0L:jDgtfRQUHPw06MoV2nwTBlhm8z

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_1a76c4556f4391e33bc6d56193307843
- Size
  
  341KB
- MD5
  
  1a76c4556f4391e33bc6d56193307843
- SHA1
  
  8294183d7e3bc181233ad26aaadcf2731ebc7dc0
- SHA256
  
  1688a40c93a8e429d40310c272b1dfa6f24e9df1e4691e8b0c2f9afb0c00ce1d
- SHA512
  
  628b447b2799aeb6155505a505bb7fa644ec2fc4d33f46aaca324377232e9d785cadee35241c31c0008be6cf9ee12b7af53728055b33a240648dd194f6f4814c
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0L:jDgtfRQUHPw06MoV2nwTBlhm8z
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan