Extracted

• • Target

    298b18e8f8cdda24a7183067de9fcab29419f800ef95ab06499af361da0c07ff

  • Size

    325KB

  • MD5

    5b9d4664c506bb4b3d0f07a43d4dbd97

  • SHA1

    7fb7dba9f978f2adcd6da1902a7a65dd44b12720

  • SHA256

    298b18e8f8cdda24a7183067de9fcab29419f800ef95ab06499af361da0c07ff

  • SHA512

    db565070e68e815cb4dd38bd4c7efa91ca049dc98e2f8ff40896d04debf6087c2626092165079e77bd4a9d56c9f00b8f1d74be750491b90c6af1403227a5127e

  • SSDEEP

    3072:/EXO1nq2MxViHsnq5n3r6HxophUz6ktkM8bf4Avp2ZEfqqJ5ew3LlgtI17Df/Ts3:4qqMsUmHUhEtAQAcEfq2pblOIf1pm0

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1