General
-
Target
file.exe
-
Size
2.0MB
-
Sample
221201-cflavaea85
-
MD5
98c61d23829478433e7711d418db7c76
-
SHA1
41bd52467c602dbcfa9624508bdc45db0f09941f
-
SHA256
cc74898fb518b6384be82cee9c5d8696774cc126fd64e9e271435b4bd1c54b8a
-
SHA512
2707bdd193f0b99458b03640396e4aa9e23c2b0d2ad565c6a7dde2db966ebab70506ad8180c45ad73ee28aaca352d8171faeeb23609d60a91f1d5c5724c9b81c
-
SSDEEP
49152:Qn0YJHMYNm07znnYclAH2GAKBwKyBCJeLLPa9XAG5cyz:Q51NRYxnBFyBCoLLP8Xcyz
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
2.0MB
-
MD5
98c61d23829478433e7711d418db7c76
-
SHA1
41bd52467c602dbcfa9624508bdc45db0f09941f
-
SHA256
cc74898fb518b6384be82cee9c5d8696774cc126fd64e9e271435b4bd1c54b8a
-
SHA512
2707bdd193f0b99458b03640396e4aa9e23c2b0d2ad565c6a7dde2db966ebab70506ad8180c45ad73ee28aaca352d8171faeeb23609d60a91f1d5c5724c9b81c
-
SSDEEP
49152:Qn0YJHMYNm07znnYclAH2GAKBwKyBCJeLLPa9XAG5cyz:Q51NRYxnBFyBCoLLP8Xcyz
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-