Extracted

• • Target

    file.exe

  • Size

    2.9MB

  • MD5

    cac2c58d278d6461f861386bddc03bc4

  • SHA1

    3c73a0348ae177b31bf4680b8b399d71b90274a8

  • SHA256

    afe675120e8918a8ecffd35832a26557a8093aa539384f47d0170792039ecfa0

  • SHA512

    dcd82766d6524d9a4e1a8777dfb4851d3636a1fc6b40a4412ac3670d8facb08411e93c92959588fd9d0d47ef757454197207e4782192d84fa442d20b83767188

  • SSDEEP

    49152:Z287vJBeGJim7C2ZDPmPfroy9PJm7ESboW8uPGPj8BqOJ2vg/M6pbGO8bFIdmddu:MWJBeCimG2tnYxgESboWDP+wBqy0ULbh

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2