Extracted

• • Target

    file.exe

  • Size

    352KB

  • MD5

    9e57176b5a9763b83288274a512ecc68

  • SHA1

    c65d93d93e824674b8a7b4557e18d9e95c829150

  • SHA256

    fd96ca284b6d0235c978f6dd74212c98d0ffec26cc22b1c2b226a61eb42adf44

  • SHA512

    d00bdee6e711f4ee1af9d75e74f188c00041a0d42ec91fd676d6081cac0e742ad5e2e75764cc4420bf155a2a360778ab24c782c35e310066430a8d9da949e691

  • SSDEEP

    6144:67Rek+0GOpFOkwZge1k5AhlJzQf1s2DKHuzbgwuKXBwVf:61enOjOkwp1gkqs26unn

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Legitimate hosting services abused for malware hosting/C2

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  behavioral1behavioral2