General
- Target file.exe
- Size 372KB
- Sample220916-e7namaaddk
- SHA256 39e18ae1185a6b9229d15f8670f52e2ed098485e274e93fd9a48d30eab4a9a8d
- MD5 5b9ebbca3ae633c21988c3411048840f
- SHA1 75315c8104bef9cd90035edcb19363c3a612bafe
- SHA512 83c40cfbf476e9a885d74165ddb2a673b61c958f81923856b6cec29df4b82570f79642bcc2e9837bfe332758ee69d0a79a51917de72b5b0267f26039831d00b7
- SSDEEP 6144:YfRmAfSYpclyrdQ3beFvDcC1Q54xHe1JqPrguGcXi3ci0uwgS+PYfrosw96zrNHa:YfLfSYMyRQ3ecC1Q57JA4crAS+PMMr9G
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 372KB
- SHA256 39e18ae1185a6b9229d15f8670f52e2ed098485e274e93fd9a48d30eab4a9a8d
- MD5 5b9ebbca3ae633c21988c3411048840f
- SHA1 75315c8104bef9cd90035edcb19363c3a612bafe
- SHA512 83c40cfbf476e9a885d74165ddb2a673b61c958f81923856b6cec29df4b82570f79642bcc2e9837bfe332758ee69d0a79a51917de72b5b0267f26039831d00b7
- SSDEEP 6144:YfRmAfSYpclyrdQ3beFvDcC1Q54xHe1JqPrguGcXi3ci0uwgS+PYfrosw96zrNHa:YfLfSYMyRQ3ecC1Q57JA4crAS+PMMr9G
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself