Extracted

• • Target

    file.exe

  • Size

    2.7MB

  • MD5

    4ad8b1d0951d42cecf2309b8bcc481bb

  • SHA1

    32496884b4b8e86e65f9619e16995879d177734c

  • SHA256

    8ae583f9350915fcb5e1fe173514606af843c1d48da7f42200d474cd4edba6c9

  • SHA512

    ee022f6eb24559f0e03e8b9821ecde62a266dc692aa2dc1a327164f4d9cb5c7a661cc55feb5e59f8f5f1141c22094e3512881d04fa3632fa1d83459c14f51cec

  • SSDEEP

    49152:Z2vEX8ae73S6GXfqtt+W3Ob+N1t1iTiM8A5qpJRhOXYqjXhdiYFJ+JZoFKGc4DLu:MsXxe7cvetpeb/D4HORjhcYn+/8DLfDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2