General
- Target file.exe
- Size 392KB
- Sample220916-tf7yaagbe7
- SHA256 8300b7608c08c7ebba60503bea52a17f3d8e87b370a2c49bd087a70ef771ec0a
- MD5 34c6ccb027f9b32f3f5694132d6bb58c
- SHA1 e3ef3222e750d05cbc64b57dacf4c22ea3cb2e90
- SHA512 36cc441b78895d28092542b441e59e014889b658d3cafa76baa0eab286dea4cbcd252f9be8050c83e782e17a5401d8e0c689d99d56b206bfef424f469d320aca
- SSDEEP 6144:c5W/IBghG3eSIMviYlRKdXF6KQ0YTq2vUGF0DJnigabwVf:cc/IEG3eSpv7IX7sUvDJi
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 392KB
- SHA256 8300b7608c08c7ebba60503bea52a17f3d8e87b370a2c49bd087a70ef771ec0a
- MD5 34c6ccb027f9b32f3f5694132d6bb58c
- SHA1 e3ef3222e750d05cbc64b57dacf4c22ea3cb2e90
- SHA512 36cc441b78895d28092542b441e59e014889b658d3cafa76baa0eab286dea4cbcd252f9be8050c83e782e17a5401d8e0c689d99d56b206bfef424f469d320aca
- SSDEEP 6144:c5W/IBghG3eSIMviYlRKdXF6KQ0YTq2vUGF0DJnigabwVf:cc/IEG3eSpv7IX7sUvDJi
- MD5 SHA1 SHA512 SSDEEP
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself