General
-
Target
file.exe
-
Size
3.6MB
-
Sample
221203-trclhsfb23
-
MD5
465b734a3802c865d23071d6f998c3a9
-
SHA1
67b5c32df4677f894ecf569e4724c4c69d73d81b
-
SHA256
b3f3628cfaa89d530a01bc1ad64dbf692bd859101e747df3fde412e64b2e46b6
-
SHA512
2db5eba8f73bd6e135754814eb3bd4d5cee798f72a61ea6b528e2f6063ac66c75c116f0fdff1904ca70a838a646f5fccc762ae34e11076127578c377924e4c9f
-
SSDEEP
98304:MoRpWKYQ8krxUKabMVlj+KGSvL5SEUE+oogf48Xcy9:LR/YQfq0HwSzGFohf48Xcy9
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
3.6MB
-
MD5
465b734a3802c865d23071d6f998c3a9
-
SHA1
67b5c32df4677f894ecf569e4724c4c69d73d81b
-
SHA256
b3f3628cfaa89d530a01bc1ad64dbf692bd859101e747df3fde412e64b2e46b6
-
SHA512
2db5eba8f73bd6e135754814eb3bd4d5cee798f72a61ea6b528e2f6063ac66c75c116f0fdff1904ca70a838a646f5fccc762ae34e11076127578c377924e4c9f
-
SSDEEP
98304:MoRpWKYQ8krxUKabMVlj+KGSvL5SEUE+oogf48Xcy9:LR/YQfq0HwSzGFohf48Xcy9
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-