General
- Target file.exe
- Size 371KB
- Sample220916-ddal1aeeb7
- SHA256 3d30171e97dd5dd913a05f8af355c7fe1eb4ecee60ddb5a31f29ae472e23bac2
- MD5 b04c219dad53c09735b086f704b9dc8c
- SHA1 3f58ea2ece69d77e34ae2d114e1f966ad49f5137
- SHA512 c1247a448038d63a4817f43db362512092de45041c6211ccbf4f8a7bfe70c791e9fc79e61d49d0cb11fa2a78c706e4a5a7b3d4d6544887404628a83526f02aa7
- SSDEEP 6144:znclAmiGYnXrYk3+b616miR1+IqccxnOc19iwhZx/YMOJJ6L5I:zkAmiGaXrYk3D6miRHqcchOc1USZxQM4
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 371KB
- SHA256 3d30171e97dd5dd913a05f8af355c7fe1eb4ecee60ddb5a31f29ae472e23bac2
- MD5 b04c219dad53c09735b086f704b9dc8c
- SHA1 3f58ea2ece69d77e34ae2d114e1f966ad49f5137
- SHA512 c1247a448038d63a4817f43db362512092de45041c6211ccbf4f8a7bfe70c791e9fc79e61d49d0cb11fa2a78c706e4a5a7b3d4d6544887404628a83526f02aa7
- SSDEEP 6144:znclAmiGYnXrYk3+b616miR1+IqccxnOc19iwhZx/YMOJJ6L5I:zkAmiGaXrYk3D6miRHqcchOc1USZxQM4
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself