yunsip | cb2c80bfb66a777180d49e7f7492f8c601f2186dec7e75d39ab9eb7db40ff03b | Triage

Sharing

General

Target

cb2c80bfb66a777180d49e7f7492f8c601f2186dec7e75d39ab9eb7db40ff03b.exe
Size

752KB
Sample

250224-1lwkrsyky9
MD5

18d0fc677b4e929bd6c9e0742ca5405b
SHA1

f07120805e6c73e7b64d63a5a36dfd1dd859bbee
SHA256

cb2c80bfb66a777180d49e7f7492f8c601f2186dec7e75d39ab9eb7db40ff03b
SHA512

fb3739a05d9b45344ff9b819238003b7bdc776c1455caad43a21fa3c81ab54ed85446822e5a8235c4b3612ac385e7b90e69cfb65b628dd196189a6b34e01d6a6
SSDEEP

6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYq:o6RI1Fo/wT3cJYYYYYYYYYYYYq

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  cb2c80bfb66a777180d49e7f7492f8c601f2186dec7e75d39ab9eb7db40ff03b.exe
- Size
  
  752KB
- MD5
  
  18d0fc677b4e929bd6c9e0742ca5405b
- SHA1
  
  f07120805e6c73e7b64d63a5a36dfd1dd859bbee
- SHA256
  
  cb2c80bfb66a777180d49e7f7492f8c601f2186dec7e75d39ab9eb7db40ff03b
- SHA512
  
  fb3739a05d9b45344ff9b819238003b7bdc776c1455caad43a21fa3c81ab54ed85446822e5a8235c4b3612ac385e7b90e69cfb65b628dd196189a6b34e01d6a6
- SSDEEP
  
  6144:o6C5AXbMn7UI1FoV2gwTBlrIckPJYYYYYYYYYYYYq:o6RI1Fo/wT3cJYYYYYYYYYYYYq
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan