General

  • Target
    e2a6ef91a504d25344b262cbc9227dae
  • Size 391KB
  • Sample220521-tk9bxadcfn
  • SHA256 26d46c6b97e45b6d82e5c47ed3725fed18d6c9113b1f7bcbe5b880e562a95863
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • nymaim

C2
  • 31.210.20.149

  • 212.192.241.16

Targets

    • Target
      e2a6ef91a504d25344b262cbc9227dae
    • Size 391KB
    • SHA256 26d46c6b97e45b6d82e5c47ed3725fed18d6c9113b1f7bcbe5b880e562a95863
    • MD5 SHA1 SHA512
    Score
    10/10
    • NyMaim

      NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks