Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    1ba05cab354eac505f80c1cee22e0e04

  • SHA1

    c47c0d4b31525793a10d6e7fce4f2941e8bf4d79

  • SHA256

    e8b28a0bb7bb19d4fe5f41df33bf5abac4f5fd508d5431df6979595fa58a95d3

  • SHA512

    3796b59a1a6a38e2820e9aa82597da239f64ed8ff6cc7d5746f4db13129d773bf1297f4c0419291022b39b08ca4216cc4894912042f2e60d2f9a4d3679ee34b6

  • SSDEEP

    24576:diz7G3NWUk9Hzkz3J/yPyy1Xaplv2sKbaHUiS63ec/RRgZIY7eCLxYia:2i3NWH9T83JoJklvbUa0J4/gNeVia

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2