Extracted

• • Target

    file.exe

  • Size

    406KB

  • MD5

    55c0f803a6f225c8d99cf5649bcde8a2

  • SHA1

    e4235a1a602a4e1bc2ff3b8fe6d1eece837c6d46

  • SHA256

    8ec72faef5f0fcd1c8b3c5371eb3f9bd8beeefa034f7fc4750168df49e35a69f

  • SHA512

    0f51225afbcdf0322442dadcd916e68ad0a1673ae1b64df0354c1e3c938aacb54b2e4c69ed8e01ca57d27b7466f1d1bfa90bebe58fdb629250addc63c749768a

  • SSDEEP

    6144:pn0aK52xZ86pYYyaihvjhbetJNk8Dy2i16kK0gLQmPC6nCrwVfquS:pnw52k6pYGiLetJS2iIkTNYVnCd

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2