Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    7949952f3f677ee2b0c983ee88129c22

  • SHA1

    0c0c9678c44e69d86ab2ab4dea04e6b99c0237a9

  • SHA256

    7df0752b03c785feec29e5a4aeb6e3d492a36e0bb7577c8d18d714b7a5c18965

  • SHA512

    8f36dae477f6a1c01afdc7e0e9921120f3267393c2725827504f0156028d86820fe14f483252bb8a8d3b9116f5293623454b8e819e10e213fe55f08904adbfb1

  • SSDEEP

    49152:Z2xyrK0PzRrbGPuGO7ZBRDwhRd5hQAyLH8GQ/AoA5hq:Mcrd57tbivdDQzLYiDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2