Analysis
- max time kernel
139s - max time network
152s - platform
windows7_x64 - resource
win7-20220812-en - resource tags
- submitted
11/10/2022, 03:46
General
- Target file.exe
- Size 340KB
- Sample221011-ebmzzsdba2
- SHA256 441b9eee712b85616ca62d08810f6d4a232c2307811c211354be18c3f3ef90d4
Score
10/10
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Signatures
- NyMaim
NyMaim is a malware with various capabilities written in C++ and first seen in 2013.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1640-54-0x0000000075811000-0x0000000075813000-memory.dmp
memory/1640-56-0x0000000000220000-0x0000000000273000-memory.dmp
memory/1640-55-0x000000000078B000-0x00000000007BC000-memory.dmp
memory/1640-57-0x0000000000400000-0x00000000005B3000-memory.dmp
memory/1640-58-0x000000000078B000-0x00000000007BC000-memory.dmp
memory/1640-59-0x0000000000400000-0x00000000005B3000-memory.dmp