General
- Target file.exe
- Size 2.1MB
- Sample221116-qsynlaba68
- SHA256 18646ff39c91ed1a3495e580ae46ec36cef89bd362b645755ca645d238da9b2c
- MD5 a5a0ed639a5a6d8d31825db7f0c23fbc
- SHA1 cfd83af729c7893622f62ed3580ed656a8518a3c
- SHA512 029c510ae9ffd80576c34b59a0ae0364b80387c907b82eadd90eed7ef71371ef9e17c5b145851f742c3a7d0339dfa6382b0729c1c097e5da20bc8493abd67f9a
- SSDEEP 49152:q2n4mzHHF2S8NU2p9/8s0O0cAPLkXTaF30aMyHfRx7Pq2:rn4aHHF2ppp90lm6kDa6a9PD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
45.139.105.171
-
85.31.46.167
Targets
-
- Target file.exe
- Size 2.1MB
- SHA256 18646ff39c91ed1a3495e580ae46ec36cef89bd362b645755ca645d238da9b2c
- MD5 a5a0ed639a5a6d8d31825db7f0c23fbc
- SHA1 cfd83af729c7893622f62ed3580ed656a8518a3c
- SHA512 029c510ae9ffd80576c34b59a0ae0364b80387c907b82eadd90eed7ef71371ef9e17c5b145851f742c3a7d0339dfa6382b0729c1c097e5da20bc8493abd67f9a
- SSDEEP 49152:q2n4mzHHF2S8NU2p9/8s0O0cAPLkXTaF30aMyHfRx7Pq2:rn4aHHF2ppp90lm6kDa6a9PD
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.