Analysis
- max time kernel
161s - max time network
176s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
11/10/2022, 02:40
General
- Target file.exe
- Size 340KB
- Sample221011-c5v7cabch8
- SHA256 2a976d8cf92d113e8c56dd9a3db304d0b3c193373139de3f05627f6e0bb100a6
Score
10/10
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Signatures
- NyMaim
NyMaim is a malware with various capabilities written in C++ and first seen in 2013.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1628-54-0x0000000076201000-0x0000000076203000-memory.dmp
memory/1628-56-0x00000000002F0000-0x0000000000343000-memory.dmp
memory/1628-55-0x000000000069B000-0x00000000006CC000-memory.dmp
memory/1628-57-0x0000000000400000-0x00000000005B3000-memory.dmp
memory/1628-58-0x000000000069B000-0x00000000006CC000-memory.dmp
memory/1628-59-0x0000000000400000-0x00000000005B3000-memory.dmp