Extracted

• • Target

    file.exe

  • Size

    2.7MB

  • MD5

    2e07bacee54ba297d64020db80270513

  • SHA1

    2c091bb0f8389d7f30eb4f4cb23c0464615f5886

  • SHA256

    fa1e7e4f70f74220fe1f5ff3c87cd59ed11db3574833ef7d941485e9a3303fc1

  • SHA512

    aac2109fa19d028c017008efe8e00cde9499ad1f9c4a347cf74fb4049fab8d6890b7a47a12d19cdca5a8504f8fc1e5781a85c1304f6ec32801269f27aedd4649

  • SSDEEP

    49152:Z2scfrK7W9wUtzW5u4ga92Bg3xJYbYBLx8KKo33x9QAPwfhnNvtN/2/3A5hq:MoW2Uti4a9mg3xySL8ZAwBd/e/QDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2