yunsip | 77a0c90db93a612d4ebe697bb8548f5ca27522b8f426267ff47ba8af421dd545 | Triage

Sharing

General

Target

JaffaCakes118_8e885af41b57f66b0c170e8ca085a159
Size

566KB
Sample

250329-v87cws1m18
MD5

8e885af41b57f66b0c170e8ca085a159
SHA1

2a9bcaa5a593055e17a77fb8bae45783c99de8c4
SHA256

77a0c90db93a612d4ebe697bb8548f5ca27522b8f426267ff47ba8af421dd545
SHA512

08d19a52f39a2ee0f17c27f9f21c873d373e44ca1a9696b840412195db7b772541fce06d83dbc8cc7de4bd67a96fa0036f9a3d94b144b77f0619230eeb8f3c72
SSDEEP

3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0Z:jDgtfRQUHPw06MoV2nwTBlhm8x

Score

10^/10

yunsip banker discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_8e885af41b57f66b0c170e8ca085a159
- Size
  
  566KB
- MD5
  
  8e885af41b57f66b0c170e8ca085a159
- SHA1
  
  2a9bcaa5a593055e17a77fb8bae45783c99de8c4
- SHA256
  
  77a0c90db93a612d4ebe697bb8548f5ca27522b8f426267ff47ba8af421dd545
- SHA512
  
  08d19a52f39a2ee0f17c27f9f21c873d373e44ca1a9696b840412195db7b772541fce06d83dbc8cc7de4bd67a96fa0036f9a3d94b144b77f0619230eeb8f3c72
- SSDEEP
  
  3072:jDKpt9sSR0HUHPwZWLnWVfEAzV2IJIwTBftpmc+z+f3Q0Z:jDgtfRQUHPw06MoV2nwTBlhm8x
Score

10^/10

yunsip banker discovery trojan
- Yunsip
  Remote backdoor which communicates with a C2 server to receive commands.
  trojan banker yunsip
- Yunsip family
  yunsip
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

yunsipbankerdiscoverytrojan

behavioral2

yunsipbankerdiscoverytrojan