General

  • Target

    file.exe

  • Size

    1.2MB

  • Sample

    221123-ndn5hage48

  • MD5

    0303226da099401db3618f67ec867765

  • SHA1

    f3fb4dc4a68e244bd2653262866529046014bb56

  • SHA256

    fdf23b0fdfab0025076b050f95cb6a5def8d572ce694c2487eee30b3371c8a3d

  • SHA512

    70a80d56dbfbad7a40155ac768c3c4ac2a566c3b68ee3b068ce1327a9854f5e636e564c468342a26e2b39f08c25e2852340c42d37527e163928ab1ae58823afd

  • SSDEEP

    24576:5iz3IAMxuHN4qy8pkVzlBufnwX4HLk8BcwfyheZQUtkqbg8gZIY7eCLxYij:y31wQN4X8pkVzlIwX4rLzyhKqNeVij

Score
10/10

Malware Config

Extracted

Family

nymaim

C2

45.139.105.171

85.31.46.167

Targets

    • Target

      file.exe

    • Size

      1.2MB

    • MD5

      0303226da099401db3618f67ec867765

    • SHA1

      f3fb4dc4a68e244bd2653262866529046014bb56

    • SHA256

      fdf23b0fdfab0025076b050f95cb6a5def8d572ce694c2487eee30b3371c8a3d

    • SHA512

      70a80d56dbfbad7a40155ac768c3c4ac2a566c3b68ee3b068ce1327a9854f5e636e564c468342a26e2b39f08c25e2852340c42d37527e163928ab1ae58823afd

    • SSDEEP

      24576:5iz3IAMxuHN4qy8pkVzlBufnwX4HLk8BcwfyheZQUtkqbg8gZIY7eCLxYij:y31wQN4X8pkVzlIwX4rLzyhKqNeVij

    Score
    10/10
    • NyMaim

      NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks