Extracted

• • Target

    file.exe

  • Size

    2.4MB

  • MD5

    19e1b8fb979ccbc5e34be5702b03834a

  • SHA1

    64f7b3faf00c91a73fa1f57f67c7de2b2ec594a0

  • SHA256

    fad11d864cf50ef7f3dbe984f3b2f6449c6e09b360ced1e4c31faf4e3cfc8744

  • SHA512

    6b8cfbc403b585ee0dae74aefef174a21cc399ee778cb42f52992176bd2132b6580a2116c2c563e0a246fdc6d019814a968cd2ff9b538591af78f77956282e89

  • SSDEEP

    49152:Z2iSIAdsP02OCCQanbSTfUqzYhIopvIHv25T2ZuozgIvsu3tKeyNIfMLdJMrA5hq:MiSZKPNOYUMYhIqIHvgTcLgK9K3WAdJC

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2