General
-
Target
file.exe
-
Size
3.6MB
-
Sample
221203-s7l98agh4x
-
MD5
21ca74e54be1896cb33d068e8fd4fe40
-
SHA1
a0f84c9434ace925648381f1cccf41a294d9395e
-
SHA256
e3334a5082a5817ae5ee6cedea82113f3fca0207ef46088209ec53b8345a10a6
-
SHA512
e8c3c66a028ecb2ba3267e665cf0d50d612cb601292d6a0790b7a300d1b765ec4d61fffef5f759bca29ca3abcb5c625b791d08844c969c2812036e3b3718e8a0
-
SSDEEP
98304:gJKkBv3KKHaxhcizQvhY+9KOlixbX6glXcy0:1+NdvhY+zliZX6glXcy0
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
3.6MB
-
MD5
21ca74e54be1896cb33d068e8fd4fe40
-
SHA1
a0f84c9434ace925648381f1cccf41a294d9395e
-
SHA256
e3334a5082a5817ae5ee6cedea82113f3fca0207ef46088209ec53b8345a10a6
-
SHA512
e8c3c66a028ecb2ba3267e665cf0d50d612cb601292d6a0790b7a300d1b765ec4d61fffef5f759bca29ca3abcb5c625b791d08844c969c2812036e3b3718e8a0
-
SSDEEP
98304:gJKkBv3KKHaxhcizQvhY+9KOlixbX6glXcy0:1+NdvhY+zliZX6glXcy0
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-