Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    0f47b10f9ff12abc1402109be616a3a1

  • SHA1

    f84e4a57747020efa1e0bb11cfc0f498ff835bcf

  • SHA256

    16629977b0e9324ea86e1cdb7ea5c782d6043ea56d64b35dd167de4547774804

  • SHA512

    b916161ae035e9f574d93179d2529db88d77350b8a64b41677c5a60148d684b696012f49c27f2e7981751e85434ae23ea1d7ccefde13f0683d29dc7fb46898de

  • SSDEEP

    24576:NizQxlLVW0UY+IihbaAogkFyCPmbKVCGkAFo6/yNgHil0i/LsGyYSagZIY7eCLx7:mQxlLVs5FrogwyCGDAcgHmSPNeVin

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2