Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    6417cd6c913c0604b08aeee01de2441b

  • SHA1

    64f8f5e027950c8bbafd2614e01184a36cb1c4de

  • SHA256

    68b8870480496e58d21d95957c9bf6ecbcd5f490f5ab280b7b34365e1ca7c9d7

  • SHA512

    dcbf67d2219f98c72df93b01844ba04325d3197f4460acd0f6a7132543c7d53b41c1191d598721b7e5d47e8e8f2cdc420f498ae1a479e0b91a8c6e438ebb24ce

  • SSDEEP

    24576:xizvvz/P14ICPRLro2bc90L9ApnEzuNbcpzow8rYcihsi+jjRFBwINkiPgZIY7es:aXJfARLNbU0L9ALNP/rYWjRvvkzNeVix

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2