Extracted

• • Target

    file

  • Size

    2.5MB

  • MD5

    5f3bb8653e2ed6f160b20a1f79b349f3

  • SHA1

    7ba2fa227f3c1dee06f604a82cbff42242aa7e89

  • SHA256

    e5777d2ac935769b827dfe5f480a6c92bcf894127d5e6e5d573e33176ead8310

  • SHA512

    572fbc223d64b4dfca127c648ece01b84a5f4ce7ef30bd8a7021c0f339b5f2518620a658dc6fe5385c363d047fc81031d792536d4fd0d61530e30d2922fc7f2a

  • SSDEEP

    49152:Z2icVnL+EuRaDj0adr5TuS+WzO2J9jJ2nL6D4blx02SndW4UR7A5hq:Mic1LLuRG0adtT/Tp9WLq5VdW4UCDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2