General
- Target file.exe
- Size 390KB
- Sample220916-2pdd2acfem
- SHA256 e86e83c20b0c276e2bc512f3e44b63eb58660b726ac5dc4b6f67bc8e5fc61e1a
- MD5 06bca0153779c79508ce5fbbc93c4b22
- SHA1 18723b9458cb5cda2303e74923367a6433639d9b
- SHA512 51b3c1d7465f71159c3e38a14c31e6a1b1222b01ee90e12ddf26d3af98f81f8caa876d1f70d72167affb0e13eb694bed4fda7aa3928985860fa01a830d126f71
- SSDEEP 6144:ooeRLqO5LYItIGAN9AOnqMeskFb8ISQtuJpNnt05GdnigabwVf:DYTLNl+AOnqxid2yi
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 390KB
- SHA256 e86e83c20b0c276e2bc512f3e44b63eb58660b726ac5dc4b6f67bc8e5fc61e1a
- MD5 06bca0153779c79508ce5fbbc93c4b22
- SHA1 18723b9458cb5cda2303e74923367a6433639d9b
- SHA512 51b3c1d7465f71159c3e38a14c31e6a1b1222b01ee90e12ddf26d3af98f81f8caa876d1f70d72167affb0e13eb694bed4fda7aa3928985860fa01a830d126f71
- SSDEEP 6144:ooeRLqO5LYItIGAN9AOnqMeskFb8ISQtuJpNnt05GdnigabwVf:DYTLNl+AOnqxid2yi
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself