General
- Target file.exe
- Size 2.9MB
- Sample221108-3jaavscbg4
- SHA256 10762caaaf0103374e2b01aaf8614c4b8f0943e5e01e211fe18ad89ec11ac32c
- MD5 4a7552c9a6bdf00239c053b0c32fee0f
- SHA1 709ba0d02846479e948b6714bdf889cf551250ce
- SHA512 8c64669dcc3c7e1dd58b56a91e66367dbb8817c93b4effd55e8f893bb40adf2f81f7e13fc3f32b34a0b9c974b03c8ab4bfa38188b584b57ba6f6d0a5c6bb1876
- SSDEEP 49152:Z2m24xmO4P0lFt2YyMdabbp/7UQr3mMRweYgLiixm8+a0mpODG/A5hq:MiiY5dQp/7UKzRweYgLiEZ+lvDq
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
45.139.105.171
-
85.31.46.167
Targets
-
- Target file.exe
- Size 2.9MB
- SHA256 10762caaaf0103374e2b01aaf8614c4b8f0943e5e01e211fe18ad89ec11ac32c
- MD5 4a7552c9a6bdf00239c053b0c32fee0f
- SHA1 709ba0d02846479e948b6714bdf889cf551250ce
- SHA512 8c64669dcc3c7e1dd58b56a91e66367dbb8817c93b4effd55e8f893bb40adf2f81f7e13fc3f32b34a0b9c974b03c8ab4bfa38188b584b57ba6f6d0a5c6bb1876
- SSDEEP 49152:Z2m24xmO4P0lFt2YyMdabbp/7UQr3mMRweYgLiixm8+a0mpODG/A5hq:MiiY5dQp/7UKzRweYgLiEZ+lvDq
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.