Overview

overview

10

Static

static

8

3653d142c2...d5.dll

windows7_x64

10

3653d142c2...d5.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3653d142c22efbd7a64e2247f272d50c299cb2b863a73805e4c528c7d73339d5
  • Size 10.0MB
  • Sample220326-ynzzvsdbfr
  • SHA256 3653d142c22efbd7a64e2247f272d50c299cb2b863a73805e4c528c7d73339d5
  • MD5 SHA1 SHA512
Score
10/10
numandobackdoortrojanvmprotect

Malware Config

Targets

    • Target
      3653d142c22efbd7a64e2247f272d50c299cb2b863a73805e4c528c7d73339d5
    • Size 10.0MB
    • SHA256 3653d142c22efbd7a64e2247f272d50c299cb2b863a73805e4c528c7d73339d5
    • MD5 SHA1 SHA512
    Score
    10/10
    numandobackdoortrojanvmprotect

    • Detect Numando Payload

    • Numando

      Numando is a banking trojan/backdoor targeting Latin America which uses Youtube and Pastebin for C2 communications.

      trojanbackdoornumando

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks