Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    d5bd26bc8869482b723e705fe372dbd5

  • SHA1

    ba63885e926f1ede39adf488c867864ca5814ee6

  • SHA256

    ed78763e4e4f9f0c68b6f9469378980f9f4e8d76ccbc1c787ccd70c46cffcc74

  • SHA512

    b129897d10f1924b3f17e10323b8881a00331555b168861281fdd592f38b38642a9843cdee019c826a6926a0189cb563bf205d774a533ebbfaf167b7bfbe9d14

  • SSDEEP

    49152:Z2b3HLJ927X16GNZTe70tETUe2zk7muSukWGxGM4RfMmjWdP3vr1wGolA5hq:Mb3rsIuze2w7zSudqL4ymj+ZwADq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2