Extracted

• • Target

    file.exe

  • Size

    1.3MB

  • MD5

    749f6adabe918101309ea26e2efa20fd

  • SHA1

    3b0247ff3d121116e025df64c5794cb3e2b846e6

  • SHA256

    ad21009b2199eae2f3c9c7535665ea900011fa5a6ec237f3cc14b9d14cf0befa

  • SHA512

    8b064dc8c02e42a4967963f23346c28ded2b54554fbfe87f8bc64a424174b15e5c671dd29856a2ad892d8d4dc98434ae6e5795edea59bbc4633995138c2f493e

  • SSDEEP

    24576:NizKrekkfn8LAfW5Gm0mrTY5OSZZ6YyQIZy+FIYPD3746mTdgZIY7eCLxYi2:mKakI89eCSZ0JMjYjLmT6NeVi2

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2