Overview

overview

10

Static

static

8

6729be401e...0d.dll

windows7_x64

10

6729be401e...0d.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    6729be401eb23017b85c357194720ed8aac2c65d470ff74505d9bd9068eaad0d
  • Size 8.4MB
  • Sample220326-thdr8aefd3
  • SHA256 6729be401eb23017b85c357194720ed8aac2c65d470ff74505d9bd9068eaad0d
  • MD5 SHA1 SHA512
Score
10/10
numandobackdoortrojanvmprotect

Malware Config

Targets

    • Target
      6729be401eb23017b85c357194720ed8aac2c65d470ff74505d9bd9068eaad0d
    • Size 8.4MB
    • SHA256 6729be401eb23017b85c357194720ed8aac2c65d470ff74505d9bd9068eaad0d
    • MD5 SHA1 SHA512
    Score
    10/10
    numandobackdoortrojanvmprotect

    • Detect Numando Payload

    • Numando

      Numando is a banking trojan/backdoor targeting Latin America which uses Youtube and Pastebin for C2 communications.

      trojanbackdoornumando

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks