Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    a73a7d1b1417c9946d6df68357569408

  • SHA1

    b1c6268707e8a42b2cf7c0dc241e4cf948f58682

  • SHA256

    a14479ff1d8873ab94779440ba6b8d0e56cb9b5e93da7eaa2a652a4a88c4fbaa

  • SHA512

    19cab071f5d06d265f0a61f413e16df1359c53bd674f5035eb13001f5194a6f2c360c6507d0d336cdd9c6088fd87a82cef0422a958e6d4ea8ef271cb4d10b1ef

  • SSDEEP

    49152:Z2U5HtxSmjsQOD3xM32ymcDwwPI/oa5VNdh1A5hq:MUEmf7329z8IgUVNdADq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2