Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    8908cfb327b12b8fd699031277c5f2b0

  • SHA1

    0ecccd35b799fce36afeed9ac4c15bcf03b49a18

  • SHA256

    6df352dd4918bb63a41c5ed87c84f4353cb0bb85c4ffcbcc4c0efbbf5a8c855a

  • SHA512

    7fea2bb9c4e5ad26c52d17799d3d15e55952c3c3c05973b098fac0f766dc6e83ac3b2644904686bfca03ab813ffb262eb3c6f55e9e62f522df1aa73d446195e6

  • SSDEEP

    49152:Z2NMLnl+rMdnASJWevDPNDOtMGfCPBxfb7nBWsQnA5hq:MNyLnAyWevD1DOuP7fbFQADq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2