Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    bce84b0c69a4dcfafca98646f5edfb89

  • SHA1

    40046451c8f4fa546c2d9becaf1e45eea6344fce

  • SHA256

    e46c3878b9756651b0cf096896e98f0197da461723cd4332373142db82fa02b3

  • SHA512

    1c82a3e148b69e26988779905462edd29a1278dbe4f67fe7fcb34877688f564c91a25349fd9e14141b95a17a463e7d974b92de0daa80a134e165512bac42aef8

  • SSDEEP

    49152:Z2YesroB2nPLt49MhFNZyrgTKuSa9Mb4P85Yzo6U1Y26KZ2HHv9EA5hq:Mnyk+kMHNMrnuls4PJo6UJ72HHv9rDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2