General
- Target file.exe
- Size 358KB
- Sample220918-yr4r8affbk
- SHA256 f145d23b836eb14debbb106542602645cb3900a072cb3ab93925ca10a3b91c63
- MD5 4e638a70c5ca1da2ab4e3d8463ab13e2
- SHA1 81f0aaea2a73227fc3e7edea25c0506d0068befe
- SHA512 b50e3b9e15a263e4ce289cafc847e4725a8f71035e85a84894136cd0c00ae72c87ffa1a51091b687fac5420b598ca23f6b30c49b71d5191f6736e4fd8db39cf4
- SSDEEP 6144:tqMhNLL/qQRRZwvgZntbEHv+c1Yn46Yvx0dRsRuigavwVfb:kkjqQegTGmc1YxYadRsd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 358KB
- SHA256 f145d23b836eb14debbb106542602645cb3900a072cb3ab93925ca10a3b91c63
- MD5 4e638a70c5ca1da2ab4e3d8463ab13e2
- SHA1 81f0aaea2a73227fc3e7edea25c0506d0068befe
- SHA512 b50e3b9e15a263e4ce289cafc847e4725a8f71035e85a84894136cd0c00ae72c87ffa1a51091b687fac5420b598ca23f6b30c49b71d5191f6736e4fd8db39cf4
- SSDEEP 6144:tqMhNLL/qQRRZwvgZntbEHv+c1Yn46Yvx0dRsRuigavwVfb:kkjqQegTGmc1YxYadRsd
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself