Overview

overview

10

Static

static

8

2571cc865f...b0.dll

windows7_x64

10

2571cc865f...b0.dll

windows10-2004_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2571cc865fa744e0570865fce009e528aeed805722710725abda3bdf144d0fb0
  • Size 8.5MB
  • Sample220327-z7mdjsdbb4
  • SHA256 2571cc865fa744e0570865fce009e528aeed805722710725abda3bdf144d0fb0
  • MD5 SHA1 SHA512
Score
10/10
numandobackdoortrojanvmprotect

Malware Config

Targets

    • Target
      2571cc865fa744e0570865fce009e528aeed805722710725abda3bdf144d0fb0
    • Size 8.5MB
    • SHA256 2571cc865fa744e0570865fce009e528aeed805722710725abda3bdf144d0fb0
    • MD5 SHA1 SHA512
    Score
    10/10
    numandobackdoortrojanvmprotect

    • Detect Numando Payload

    • Numando

      Numando is a banking trojan/backdoor targeting Latin America which uses Youtube and Pastebin for C2 communications.

      trojanbackdoornumando

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks