General
- Target file.exe
- Size 370KB
- Sample220919-nc69paech2
- SHA256 0821eb16ab4a47e8ca876c05dbccab3af8fce9e592b4394f0282a2ee26564945
- MD5 13694f6be25e84ba63827cc84fe7f5b1
- SHA1 de66072919e2f3341a73e55ad0a7edc1527cb1e2
- SHA512 2e2b5f8040ac87efac3f03ccba3bd7969fa7de976d5cf2a6d06918459ec6b3af8636d596b3ca2d51f4fe47f6843cf499ea4ad49f37649cb28c1f2d9c86f4f81a
- SSDEEP 6144:9JkePALPb5apEn4ksE206GKp0sBY5itiP01Y2igavwVfB:9Jke4Lb5ap2seKp0s4i31S
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 370KB
- SHA256 0821eb16ab4a47e8ca876c05dbccab3af8fce9e592b4394f0282a2ee26564945
- MD5 13694f6be25e84ba63827cc84fe7f5b1
- SHA1 de66072919e2f3341a73e55ad0a7edc1527cb1e2
- SHA512 2e2b5f8040ac87efac3f03ccba3bd7969fa7de976d5cf2a6d06918459ec6b3af8636d596b3ca2d51f4fe47f6843cf499ea4ad49f37649cb28c1f2d9c86f4f81a
- SSDEEP 6144:9JkePALPb5apEn4ksE206GKp0sBY5itiP01Y2igavwVfB:9Jke4Lb5ap2seKp0s4i31S
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself