General
-
Target
file.exe
-
Size
3.4MB
-
Sample
221203-p9r2pscd25
-
MD5
fc638d7ebe4d42dc6b4e2f37dc9bff87
-
SHA1
4fd7889ffaeb106c0eb5f44f5c99daa1018f607a
-
SHA256
62287540be46f2a1f4a06fc6244b42bf7ffc468790317d1b88d0a33e5fd30059
-
SHA512
116ee07dd1bbf30b2db7235c26689d19d5cb993df106b3bafa08bc3796e30b298838bea3e7ca8ed1ee9c416114f9507e902902cc1be3955133fa2c74d916f5dc
-
SSDEEP
98304:8S4zJ7NrJvpiX23ikjKXd77yiQ6bfDwxDvXkjDaUwdXcyW:/4xAmSkjKXVyiQwf0xDvXkr0XcyW
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
3.4MB
-
MD5
fc638d7ebe4d42dc6b4e2f37dc9bff87
-
SHA1
4fd7889ffaeb106c0eb5f44f5c99daa1018f607a
-
SHA256
62287540be46f2a1f4a06fc6244b42bf7ffc468790317d1b88d0a33e5fd30059
-
SHA512
116ee07dd1bbf30b2db7235c26689d19d5cb993df106b3bafa08bc3796e30b298838bea3e7ca8ed1ee9c416114f9507e902902cc1be3955133fa2c74d916f5dc
-
SSDEEP
98304:8S4zJ7NrJvpiX23ikjKXd77yiQ6bfDwxDvXkjDaUwdXcyW:/4xAmSkjKXVyiQwf0xDvXkr0XcyW
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-