yunsip | 4cf32eb270f3423555935f12dcc9a5063188495c271bf7e963bb08684627d55f | Triage

Sharing

General

Target

4cf32eb270f3423555935f12dcc9a5063188495c271bf7e963bb08684627d55fN.exe
Size

528KB
Sample

250225-gk66bszrx8
MD5

724ea1cce2960a6a6c63a99606704490
SHA1

31c679c9315bb14cc9c4f0fc70a694db7a8f71b9
SHA256

4cf32eb270f3423555935f12dcc9a5063188495c271bf7e963bb08684627d55f
SHA512

800f4556c4d4fe2cff2275edc0eb39be3c8126af947bf5508cf00d7148deb13455aba993f1a52f181876ec3d9e2b3a40d3cc1960501e0cc1c10b829f55417a28
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0q:jDgtfRQUHPw06MoV2nwTBlhm8i

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  4cf32eb270f3423555935f12dcc9a5063188495c271bf7e963bb08684627d55fN.exe
- Size
  
  528KB
- MD5
  
  724ea1cce2960a6a6c63a99606704490
- SHA1
  
  31c679c9315bb14cc9c4f0fc70a694db7a8f71b9
- SHA256
  
  4cf32eb270f3423555935f12dcc9a5063188495c271bf7e963bb08684627d55f
- SHA512
  
  800f4556c4d4fe2cff2275edc0eb39be3c8126af947bf5508cf00d7148deb13455aba993f1a52f181876ec3d9e2b3a40d3cc1960501e0cc1c10b829f55417a28
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0q:jDgtfRQUHPw06MoV2nwTBlhm8i
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan