General

  • Target

    a623742182e356eb9fa9c38948a08715.exe

  • Size

    363KB

  • Sample

    220919-j8z32agac4

  • MD5

    a623742182e356eb9fa9c38948a08715

  • SHA1

    c99d70bc1fae2195c8bb11c370dbd3f8ccba17e3

  • SHA256

    7e2d9db1eb708dc899f2f4a1f7040c624f1f48051f3ed3cb1419eb117902bc8c

  • SHA512

    222eb9d75f961e409ee5e2f1e30ea8ca5f35c7fcf98ac5d9ae6234bab75f7d5439162546f75a927b8499fd6d429b82bc3158bae6fa2c1531d268f6042d320848

  • SSDEEP

    6144:n6FmdnLDITy/CmqVhTUKUtVoiv/EAxfu8qRpOwRAuqkn6MP0zZigavwVf:n6FmtHITy/CEKsoiv3xfu8uRSknCA

Score
10/10

Malware Config

Extracted

Family

nymaim

C2

208.67.104.97

85.31.46.167

Targets

    • Target

      a623742182e356eb9fa9c38948a08715.exe

    • Size

      363KB

    • MD5

      a623742182e356eb9fa9c38948a08715

    • SHA1

      c99d70bc1fae2195c8bb11c370dbd3f8ccba17e3

    • SHA256

      7e2d9db1eb708dc899f2f4a1f7040c624f1f48051f3ed3cb1419eb117902bc8c

    • SHA512

      222eb9d75f961e409ee5e2f1e30ea8ca5f35c7fcf98ac5d9ae6234bab75f7d5439162546f75a927b8499fd6d429b82bc3158bae6fa2c1531d268f6042d320848

    • SSDEEP

      6144:n6FmdnLDITy/CmqVhTUKUtVoiv/EAxfu8qRpOwRAuqkn6MP0zZigavwVf:n6FmtHITy/CEKsoiv3xfu8uRSknCA

    Score
    10/10
    • NyMaim

      NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks