Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    f41ee7138424e1efdb3268aad9b65e31

  • SHA1

    4c713d059c44f37faec689d3e4aff77e0511fee3

  • SHA256

    320925457414c16200197f0bbd64f586f9ba46e8bb59b83e9c509b6cfc2c67e6

  • SHA512

    953730879b283dc8ee76bcd48dd2de13a6ca6fbdf4a884b21fe7619140181624d8c4b72a75fb7ceb07351cb4f35fa465f0159289ce16cc7e1e44408959b2e47d

  • SSDEEP

    24576:ViziCbxk5FZxMIpnmPbTPVFeh/Gyg/SvxVFsu5tCbJhxPSsf/EbkhgZIY7eCLxY/:+iCb2hmPbTTSGxSZVz4JhlSskhNeViY

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2