Extracted

• • Target

    file.exe

  • Size

    2.8MB

  • MD5

    1bcf6ff81649f731130463ba9a01b396

  • SHA1

    278b15c0d22c2974f098b35e7020dc15291d06b2

  • SHA256

    cfec7afdad67403c20bccef26451f130a4d83f83fcef0d7bc4c6ca803d259a86

  • SHA512

    76f1ade1b916c2564b93856acc6bb4b7d0051b1aa655b81fee334f6662de2de1aa16ddcd991fc1d877ec3beb57f12b9402f58f001fbbbdeff6310a29d3cb1471

  • SSDEEP

    49152:Z2nnGOWA4Ma2SnAg8QOUiv18RjU4DjiqZPqAoYlafE5HA5hq:MWA4UpAiCjU41PIBYgDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2