General

  • Target

    file.exe

  • Size

    1.4MB

  • Sample

    221124-eb7pdsad31

  • MD5

    55733d43919dd0c6ec4644d412ae7c4d

  • SHA1

    bdcf9a65f105cef1d1c3042ed0a8bbebbb09aa21

  • SHA256

    f0b695ccee608d4494263c8eb59e4923d84f88b057f0844388aaf122ba874f41

  • SHA512

    530f5d783b317c571c612944d9775b22dce7b61413ec41785087ffd4f137a7e95a5a043bcb006b7aecb4d3fae5b471587c2d1a0042cc5aa08554318246ed2afb

  • SSDEEP

    24576:tiztUBR6R7XC2DMoAeTRzuxiLxMkiHRJuxQf/18ph17akrI72gZIY7eCLxYiw:Gt2R6R7IoA+RzaiOkixwxQfyhVZmNeVb

Score
10/10

Malware Config

Extracted

Family

nymaim

C2

45.139.105.171

85.31.46.167

Targets

    • Target

      file.exe

    • Size

      1.4MB

    • MD5

      55733d43919dd0c6ec4644d412ae7c4d

    • SHA1

      bdcf9a65f105cef1d1c3042ed0a8bbebbb09aa21

    • SHA256

      f0b695ccee608d4494263c8eb59e4923d84f88b057f0844388aaf122ba874f41

    • SHA512

      530f5d783b317c571c612944d9775b22dce7b61413ec41785087ffd4f137a7e95a5a043bcb006b7aecb4d3fae5b471587c2d1a0042cc5aa08554318246ed2afb

    • SSDEEP

      24576:tiztUBR6R7XC2DMoAeTRzuxiLxMkiHRJuxQf/18ph17akrI72gZIY7eCLxYiw:Gt2R6R7IoA+RzaiOkixwxQfyhVZmNeVb

    Score
    10/10
    • NyMaim

      NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks