General
-
Target
file.exe
-
Size
1.2MB
-
Sample
221124-ewc1hsgf44
-
MD5
6d4b1775fbd0a4627d1de926b46bc256
-
SHA1
a12b3c0b70e30b3033cdd2fa37f3104214fa7a1c
-
SHA256
5b2233757b02d608b3433d978aed7afd542db3202d543b7dfaab405c0d67d46f
-
SHA512
5467c2fb7c634932dce74aa458dffe6d1837f497ca0fe4791544ca8f873916fe583f173c6b06a80e39205fcf407f292f7fffb524c755f33e87fa786bb0b69750
-
SSDEEP
24576:1izs4FgS8zfwJbvzgmlSTJOVzSHHpJIZvrdKVShZoDfcJPVNFyEi7gZIY7eCLxYU:esmgXzoJvtSVOVzRZvZKVsZogtZNeViX
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.2MB
-
MD5
6d4b1775fbd0a4627d1de926b46bc256
-
SHA1
a12b3c0b70e30b3033cdd2fa37f3104214fa7a1c
-
SHA256
5b2233757b02d608b3433d978aed7afd542db3202d543b7dfaab405c0d67d46f
-
SHA512
5467c2fb7c634932dce74aa458dffe6d1837f497ca0fe4791544ca8f873916fe583f173c6b06a80e39205fcf407f292f7fffb524c755f33e87fa786bb0b69750
-
SSDEEP
24576:1izs4FgS8zfwJbvzgmlSTJOVzSHHpJIZvrdKVShZoDfcJPVNFyEi7gZIY7eCLxYU:esmgXzoJvtSVOVzRZvZKVsZogtZNeViX
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-