Extracted

• • Target

    file

  • Size

    2.1MB

  • MD5

    3181f89de6ab46ae5de51eaebabb5977

  • SHA1

    31e85527c67c85e75d6c08882faba819684f4576

  • SHA256

    4aefce3261f5952d415230706c60984dabf72d1a90d3a0212a999001964bc96f

  • SHA512

    83865c2160d886b25634d3cdd83def504fdf11043380b7435ea64a6967642f0847d5c73e529dacad42714cdff5d772d241e56f374c3aee753b913b5e631211ca

  • SSDEEP

    49152:McjbPcmbKUCxhhpqd9XpS9ByzjR1rHMDxzcKmA8Rl/gZoat3DjeK0RZwAG5cyp:McjbBbOxDpo9ZSjKRVG1cKF8/Otve1Zo

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2