Overview

overview

10

Static

static

10

cdf4b77659...e9.dll

windows7_x64

10

cdf4b77659...e9.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cdf4b776599edc5640c53c2ecdf0959b24d49245e6fae4d1ec57c03cf3660ae9

  • Size

    3.5MB

  • Sample

    220502-b6jdhahcf7

  • MD5

    c0a26edbd8e0bb5ba4e32eb3fceb250b

  • SHA1

    a6dfd89164d12ffb403c57a22c65fcbe43bd873d

  • SHA256

    cdf4b776599edc5640c53c2ecdf0959b24d49245e6fae4d1ec57c03cf3660ae9

  • SHA512

    de2cfeadf4b3eb2e5e2bffdf048bcdbfc67622f2befd1391407a00c07e38c0c80ce497060d70f6ce1b797012c795f515d880ceb984c82824c3c92ea7144d2695

Score
10/10
numandobackdoortrojan

Malware Config

Targets

    • Target

      cdf4b776599edc5640c53c2ecdf0959b24d49245e6fae4d1ec57c03cf3660ae9

    • Size

      3.5MB

    • MD5

      c0a26edbd8e0bb5ba4e32eb3fceb250b

    • SHA1

      a6dfd89164d12ffb403c57a22c65fcbe43bd873d

    • SHA256

      cdf4b776599edc5640c53c2ecdf0959b24d49245e6fae4d1ec57c03cf3660ae9

    • SHA512

      de2cfeadf4b3eb2e5e2bffdf048bcdbfc67622f2befd1391407a00c07e38c0c80ce497060d70f6ce1b797012c795f515d880ceb984c82824c3c92ea7144d2695

    Score
    10/10
    numandobackdoortrojan

    • Detect Numando Payload

    • Numando

      Numando is a banking trojan/backdoor targeting Latin America which uses Youtube and Pastebin for C2 communications.

      trojanbackdoornumando

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks