General
-
Target
file.exe
-
Size
2.2MB
-
Sample
221120-nmp36abc35
-
MD5
9337424fdafa2b9e320dd2bcb2dab185
-
SHA1
1b1a4da769f79cba6291b6c3fb14ad767bae729d
-
SHA256
8ed3ebd912480f6e0dba904a79a612e333544d86ad7491d32a3ee8bc659c7525
-
SHA512
31afaa9d34cd6e54de972ef9c1b84e1416e0f048620defc66882db0e3dbf082ebbf606657daa2b0430da5d9c640ff649ee7749c652e7408098daeb7995200359
-
SSDEEP
49152:q2CO024S7nFGHMO5XzOAKPbJVm4fosPNCYUxVkBaFwnm:rC84InFGHMO5XyRzJVBZBUxVkB04m
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
2.2MB
-
MD5
9337424fdafa2b9e320dd2bcb2dab185
-
SHA1
1b1a4da769f79cba6291b6c3fb14ad767bae729d
-
SHA256
8ed3ebd912480f6e0dba904a79a612e333544d86ad7491d32a3ee8bc659c7525
-
SHA512
31afaa9d34cd6e54de972ef9c1b84e1416e0f048620defc66882db0e3dbf082ebbf606657daa2b0430da5d9c640ff649ee7749c652e7408098daeb7995200359
-
SSDEEP
49152:q2CO024S7nFGHMO5XzOAKPbJVm4fosPNCYUxVkBaFwnm:rC84InFGHMO5XyRzJVBZBUxVkB04m
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-