Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    aaad1a286feee914ef220663d0c9efd0

  • SHA1

    454a9113749d663cf21e4dc2826f71eea058ef3a

  • SHA256

    b78abc3e0d34c177c0e0a1363c8009164537610a6e42fb43b742ade93f35e23c

  • SHA512

    7dbec86d9da4b67f2d22fc157c2c1b6a8b47e8b5ce8a6d2dea5708099040cf71e05542a90a499047a09c78a325673393f7f6e044adebbf96555cd2c74f4e5e38

  • SSDEEP

    24576:NizuDH7k/APvEoMXt12+zg3R7kicGRZWM9G38BiVBwE33elYkX1t6rXCUMUgZIY/:muDbk/Aa2wghpFRkMY3p1noYkFwSTNey

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2