Extracted

• • Target

    1aee5b97c777fd7c7db6ba98974ddc49.exe

  • Size

    340KB

  • MD5

    1aee5b97c777fd7c7db6ba98974ddc49

  • SHA1

    b6e8bb3152c5e541afd1725da98377ae2def1b9b

  • SHA256

    385c9c32cf0f1661f1831b5fabe93f41ac609b31eaea300c327a71de0bfdcbcc

  • SHA512

    87547ecbe9587a10a6a759548ae76913c6756c9f88a34f62487a9584410a29a25e527a184f5fd6d68ec6cc56d22bda621262f820800d45ecf91eec658dd22655

  • SSDEEP

    6144:k/TL+BteH67joN07TEH3qx2xcT4Zx7u3OYm4k6c0t+niga:k76BtboOwH3qx2RCOjkt+i

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2