Extracted

• • Target

    file.exe

  • Size

    2.4MB

  • MD5

    148ef6355876ea127b0f720d7d625b88

  • SHA1

    19e16d6e264e888a462e11f24c8767399bf34226

  • SHA256

    96d731e3eeccd16f7e02381bc437f3b0674c3b990255a813ef2f43311c5dc778

  • SHA512

    0f9c3a212acdc66374291e134feb17d06be7f0cd3704dd2d56370433984dd93ab3c285a86665c971b5cdd375ba07eab864933e3772a6768886b771d547f4f0d0

  • SSDEEP

    49152:Z2Nbq+lhVmT8q75ZMolGIA9KqnqzRUiIiKpn+JZbyEd/tGrl0nbJvr2hbsLEu3AW:M1th8T8iMolGIrAq1IiG+JZbzpArlStT

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2