Extracted

• • Target

    file.exe

  • Size

    2.9MB

  • MD5

    834413c0a338f50502ade0be2d5c0982

  • SHA1

    60e0da29361dac00f7c7b760d5ad9c06b4307825

  • SHA256

    1db4441a81a67361858d00c2fd804833cd7f90071ae4d8d8ae51ea7603589e0a

  • SHA512

    de6129bd95751e1c193b32d68ec92776b9656111f66d8ca78d7d368a98c510ff6455516fbe713188d503041354a7ecd086dc5e809bc88ea04bfa551e67b55e80

  • SSDEEP

    49152:Z2OhYUOfVDzX9SStBZgTp6QM+yT0f0ofIP3v5A1s3npmnerei9mLH+96x6YdAsvF:MOUfdBSwZY6Q5ywffo1pmne39a+A6s4W

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2