General
-
Target
file.exe
-
Size
3.6MB
-
Sample
221203-sdwa2aee4y
-
MD5
88285e81d0f5a078eae78e16dde8efca
-
SHA1
a3784243505768aa19056c04a666af28d43690a8
-
SHA256
ce5af3b0de5438041b6fe17464d25a1023572d74a3851cebaa5670e30ed9ed6d
-
SHA512
0b881f9201acb75014aa53b9a3a2bb951331b85d3774085016a70a0add1bf577700ae485d437c901823f010d1ef5e8c712338197453b3375f57f5ebf62f2957a
-
SSDEEP
98304:8+5aNAIvEEsK4LfXExr8mPTBEnAfFC8CMV6HgBeO38sXcyA:zasESX4rLPTB1fFXChHgB38sXcyA
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
3.6MB
-
MD5
88285e81d0f5a078eae78e16dde8efca
-
SHA1
a3784243505768aa19056c04a666af28d43690a8
-
SHA256
ce5af3b0de5438041b6fe17464d25a1023572d74a3851cebaa5670e30ed9ed6d
-
SHA512
0b881f9201acb75014aa53b9a3a2bb951331b85d3774085016a70a0add1bf577700ae485d437c901823f010d1ef5e8c712338197453b3375f57f5ebf62f2957a
-
SSDEEP
98304:8+5aNAIvEEsK4LfXExr8mPTBEnAfFC8CMV6HgBeO38sXcyA:zasESX4rLPTB1fFXChHgB38sXcyA
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-