Extracted

• • Target

    file

  • Size

    2.9MB

  • MD5

    f0de0532d91aae1bfb035f53b62ce097

  • SHA1

    481af9adf1d06caeee8fa944841ddf954d5c07f7

  • SHA256

    921be38c5c84a6e09837622885c8346599f6c588729bfa788b4d1491d66d894d

  • SHA512

    510fcf8e0b126cfd5fbc1e293271114d3dd82b727c9c1de08ebf98485ed916270cb3ae2998821804194578d78109b8fc8676848d8b1de6a570ee09fe539f50af

  • SSDEEP

    49152:Z2QFybszX7scTC+y7nQ7BvJh4q8zKiW2L66MpIV5JsIMf8CkIG4c1pKpu9Lf3/AW:Ma8svGx7W/4qc6bIV5wf8pd48KpyYDq

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2