Extracted

• • Target

    file

  • Size

    2.8MB

  • MD5

    365cdb873373977e7ecb0f1cfe880a73

  • SHA1

    fbae09f6773465d099776cc111ba76f2a7ec45be

  • SHA256

    f62e231187f95a7f95ea964c2969395b044fecb62ae83f6dfddf260268dc29cd

  • SHA512

    1b7eb9799d6840a214fe1a349f4f1b123a504ed556a1b08befc5b8e10034dbbdb76fc5972c79d063faa1ac7deaa1de0e80e93cecc04a5c87784dd4cd08509e88

  • SSDEEP

    49152:Z2+J+qtK90Kw/ZJVNCEYtbE0EFvUSsDm3BhUJtDqIl2+T1ab2vOlfe+D5A5hq:M+xtKCKw/Z7NCEAREZ7im3UZ51aSmlKW

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2