Extracted

• • Target

    cbe5ad908eaff3c57dc24bd937c2268e380926ea39e69cd77d0ad7854aa73f19

  • Size

    300KB

  • MD5

    baf64e13d868293522c6014a07f5d8f7

  • SHA1

    548fdfb25fd58942eb2f9bd291408498ee441448

  • SHA256

    cbe5ad908eaff3c57dc24bd937c2268e380926ea39e69cd77d0ad7854aa73f19

  • SHA512

    c4a859582ba7f077a951eedee292c4acdccfdb0287f0611ca85970fb6392d9502bca64d6bb6e21ba9c4a6524adcb94a7a803c000d837f0fd8bd1b949ef1ac095

  • SSDEEP

    6144:GdAowps+XLtSolGtyWxYOPyHByYxNfloQFOOwhFJOy3odai:GdKiuRS94WxYOPcyYJKOOYyFi

  Score

  10^/10

  nymaimtrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  behavioral1behavioral2