Extracted

• • Target

    file.exe

  • Size

    395KB

  • MD5

    64f826de5b5d9e60d70a33100f9b1f40

  • SHA1

    8bfdee31b2d9f11e3418c721eae250ed366ff9c3

  • SHA256

    2e62aa1576a4a77f2686402b08c7835fabef0a9e8e6b22a2fb093bad76e18c00

  • SHA512

    a13d4e16c68d29e0ba3bac85d36655a97222b14d1763a3b5e05759e4795bdbbc2314928ed5cc65e29fa8ac7ae6f1344a385c2a9f4ec7188203c0a40d158313bc

  • SSDEEP

    6144:qtHJiCmQfwnCemscwloEI4gfdMEpBpQuzbgwuQnSwVfU:q5glUf3wloEI4gfnpIunnDi

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2