Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    8e3cc7a15832cfaa724fd78702f138b9

  • SHA1

    5577aa437fed39905d0180a21e4d48acee4b273f

  • SHA256

    7fb775bfd7d8cb1996f71d31d3adf1e43e2cb4e5e510ba1100b96f7771f6cda7

  • SHA512

    7c91b66950344a312377906a819acac7155127b709e125c5b1819c557da6849fa6ed41fa6168bd41d6c9ea15f256ed5bef682569fea75078415d1b52e660f797

  • SSDEEP

    24576:lizWfodPvghouOwKHyhftBOsPYkglXcr7ZQeeilngZIY7eCLxYil:OndHguvfcPYllXI7+3ilgNeVil

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2