Overview

overview

10

Static

static

10

9ffac7533c...18.dll

windows7-x64

10

9ffac7533c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ffac7533cb82db816f39c5595201658_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240612-j2nfnavgpe

  • MD5

    9ffac7533cb82db816f39c5595201658

  • SHA1

    148f35a1fdf7d62401910f25123ee50f4d534bdb

  • SHA256

    6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215

  • SHA512

    c72cba78fff45360335269681f13a2569d084f766e378d25cc6ce713504ecc62a6b3a3f1362b636f2d600db2df900ff853c5a9efdc8d72200842662199ed58a8

  • SSDEEP

    24576:39HtJTKSpLU8IoC8inRRiPJryL7pIPkNY5TVvv7+O+gG:BKSRUkCHbe+L7prsVn7+O+gG

Score
10/10
numandobackdoortrojanupx

Malware Config

Targets

    • Target

      9ffac7533cb82db816f39c5595201658_JaffaCakes118

    • Size

      1.3MB

    • MD5

      9ffac7533cb82db816f39c5595201658

    • SHA1

      148f35a1fdf7d62401910f25123ee50f4d534bdb

    • SHA256

      6fa5054b762b2e2b15b27e5a01e81a92d8f9af41216f1e2d35d797903289e215

    • SHA512

      c72cba78fff45360335269681f13a2569d084f766e378d25cc6ce713504ecc62a6b3a3f1362b636f2d600db2df900ff853c5a9efdc8d72200842662199ed58a8

    • SSDEEP

      24576:39HtJTKSpLU8IoC8inRRiPJryL7pIPkNY5TVvv7+O+gG:BKSRUkCHbe+L7prsVn7+O+gG

    Score
    10/10
    numandobackdoortrojanupx

    • Detect Numando payload

    • Numando

      Numando is a banking trojan/backdoor targeting Latin America which uses Youtube and Pastebin for C2 communications.

      trojanbackdoornumando

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks