yunsip | b7699ac279a66795ed30225116e78a8ff344276639c0ccb13cc2c4d8d2579409 | Triage

Sharing

General

Target

b7699ac279a66795ed30225116e78a8ff344276639c0ccb13cc2c4d8d2579409N.exe
Size

526KB
Sample

250225-djczbazky9
MD5

1b4835862c160ba8a93a0a0dae238680
SHA1

59b4156a4e8149c5aa68636f4e15d6e9740a9320
SHA256

b7699ac279a66795ed30225116e78a8ff344276639c0ccb13cc2c4d8d2579409
SHA512

cc3e9a848e1eab1f62c1d8352ddc491c78bfefd1b7c53791103ac57d5b281aa2de92d3eaba72b6a533ca2d449406530ed966e3f255c253ecf64c8d2757d1fc13
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0d:jDgtfRQUHPw06MoV2nwTBlhm8V

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  b7699ac279a66795ed30225116e78a8ff344276639c0ccb13cc2c4d8d2579409N.exe
- Size
  
  526KB
- MD5
  
  1b4835862c160ba8a93a0a0dae238680
- SHA1
  
  59b4156a4e8149c5aa68636f4e15d6e9740a9320
- SHA256
  
  b7699ac279a66795ed30225116e78a8ff344276639c0ccb13cc2c4d8d2579409
- SHA512
  
  cc3e9a848e1eab1f62c1d8352ddc491c78bfefd1b7c53791103ac57d5b281aa2de92d3eaba72b6a533ca2d449406530ed966e3f255c253ecf64c8d2757d1fc13
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0d:jDgtfRQUHPw06MoV2nwTBlhm8V
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan