Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    336KB

  • Sample

    221028-fdd1jaehep

  • MD5

    dd0ca0a8da1c8fb72b1ad80dc78c3ed2

  • SHA1

    616f2bc9d06cbd7a1a1a88298c7eb71ec1d67a01

  • SHA256

    29819b55e60be88f80f634504f1981e9a6694aa8c8c9d190f6d7b539a292e7e1

  • SHA512

    96d7707adcbc1364e345e23420435bec9c83f1a50a886b5018e71e2758b305ba15692632747701558a24625719f7e8e1d9ce6ea8d4f469b1ff9a4767a905b012

  • SSDEEP

    6144:gk4KHPL+kIvbbucJ+pjzqyYf58JsUQ5xetReNfCTj:gk4KHPKHvnucJuBo0sv5xetiqTj

Score
10/10
nymaimtrojan

Malware Config

Extracted

Family

nymaim

C2

45.139.105.171

85.31.46.167

Targets

    • Target

      file.exe

    • Size

      336KB

    • MD5

      dd0ca0a8da1c8fb72b1ad80dc78c3ed2

    • SHA1

      616f2bc9d06cbd7a1a1a88298c7eb71ec1d67a01

    • SHA256

      29819b55e60be88f80f634504f1981e9a6694aa8c8c9d190f6d7b539a292e7e1

    • SHA512

      96d7707adcbc1364e345e23420435bec9c83f1a50a886b5018e71e2758b305ba15692632747701558a24625719f7e8e1d9ce6ea8d4f469b1ff9a4767a905b012

    • SSDEEP

      6144:gk4KHPL+kIvbbucJ+pjzqyYf58JsUQ5xetReNfCTj:gk4KHPKHvnucJuBo0sv5xetiqTj

    Score
    10/10
    nymaimtrojan

    • NyMaim

      NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

      trojannymaim

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks