General

  • Target
    file.exe
  • Size 382KB
  • Sample220918-sy682abdf5
  • SHA256 8e9cc7dfb5ebc2fa8b4f6e738076bb6cb9830b118c1da38fa42b031c331c2e6b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • nymaim

C2
  • 208.67.104.97

  • 85.31.46.167

Targets

    • Target
      file.exe
    • Size 382KB
    • SHA256 8e9cc7dfb5ebc2fa8b4f6e738076bb6cb9830b118c1da38fa42b031c331c2e6b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • NyMaim

      NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks