Extracted

• • Target

    file.exe

  • Size

    340KB

  • MD5

    b2a861f82ac08a477f4d0d979b7ab14d

  • SHA1

    3a894274686b1b3034f7b145449fd0b1a328a870

  • SHA256

    31d3989bd568a29e211f378c9812e51ac312d4b0be152a8b4e102204dda1fd7f

  • SHA512

    008258b11c803565249f9c951ccd4ffc326575abafefa8cc0704ede771faacff9813dcdbf2799d895c230a50efafc67d6c1ea7a700b233ac9fab8705341f824a

  • SSDEEP

    6144:512KuJLqBKVeCaB0haTbCGATMElxPC7+eNI5+IxmD+xKTE:5gKuJAKACdYTbChMIxPCRq5+ND1E

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Loads dropped DLL

  behavioral1behavioral2