General
- Target file.exe
- Size 357KB
- Sample220916-mesnmsbahj
- SHA256 5e1d69f4f539b3d126aa398e3596f706fc55207ad9fdd7285a5d267c1658087d
- MD5 efdd86218f7105e3be71d2b129ef3959
- SHA1 7973e79f183fc76dcdee17c1c319cd0c3d75ebc2
- SHA512 fae0e30ef780304c1b67d17bf7f1e460a8c7990d1bddda3e42366493cb5a94ee379d3cc1e0d1d46885362854054034cbe3bf174d13bcda82048a08b0a3e02f4f
- SSDEEP 6144:4xWHAaZhEzMqMIZ3d5cjx7Y05BPZc0EPniga:4xSAaTEzMqMI5d5Y5Broi
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 357KB
- SHA256 5e1d69f4f539b3d126aa398e3596f706fc55207ad9fdd7285a5d267c1658087d
- MD5 efdd86218f7105e3be71d2b129ef3959
- SHA1 7973e79f183fc76dcdee17c1c319cd0c3d75ebc2
- SHA512 fae0e30ef780304c1b67d17bf7f1e460a8c7990d1bddda3e42366493cb5a94ee379d3cc1e0d1d46885362854054034cbe3bf174d13bcda82048a08b0a3e02f4f
- SSDEEP 6144:4xWHAaZhEzMqMIZ3d5cjx7Y05BPZc0EPniga:4xSAaTEzMqMI5d5Y5Broi
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself