General
- Target file.exe
- Size 381KB
- Sample220918-at2tmsaec3
- SHA256 f03631ef2f834bf26eefde590f30ecf8ef3a759c69306d2bf1b7fc3c92a6cfeb
- MD5 38e5498afc69b9ec1a07626e8c4f157e
- SHA1 f89eff4a78157b1c225c5be63763c2b0c07be402
- SHA512 b17c6af4bd47e6a545ef3e564a973b4a2f053f935d2827773e6319ec32f55dd3215e5e2a629ed94a54f5d43b8bfd2d8cd9b88bc5def0abfd345884f2282bb9ba
- SSDEEP 6144:CNiLPzilGXHMI0SR9o/1UbH8BBGLNyFE98/3Gf8G08nigabwVf:CNirzilSMI0Td68fGLNye8/3GM8i
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 381KB
- SHA256 f03631ef2f834bf26eefde590f30ecf8ef3a759c69306d2bf1b7fc3c92a6cfeb
- MD5 38e5498afc69b9ec1a07626e8c4f157e
- SHA1 f89eff4a78157b1c225c5be63763c2b0c07be402
- SHA512 b17c6af4bd47e6a545ef3e564a973b4a2f053f935d2827773e6319ec32f55dd3215e5e2a629ed94a54f5d43b8bfd2d8cd9b88bc5def0abfd345884f2282bb9ba
- SSDEEP 6144:CNiLPzilGXHMI0SR9o/1UbH8BBGLNyFE98/3Gf8G08nigabwVf:CNirzilSMI0Td68fGLNye8/3GM8i
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself