Extracted

• • Target

    file.exe

  • Size

    3.8MB

  • MD5

    6f5b8eac957440b5d2f8e6257abaa456

  • SHA1

    6595656b5568aee5d54d1c6ed77be55a38125aa5

  • SHA256

    916da3336d1a6431415cae7e7bc74b92898ed6eecb150620762de969455fe06a

  • SHA512

    ab64969b50f29f91fce550bef2930356674eba38809e996e291f7805d5afef91ea663490a1a7f70fc4a563e5b3bca3ed11100cd56d1576d9fe69626ed5fdb909

  • SSDEEP

    98304:UInI52eM9ZnffRbKNsxM6m8e9h40H4c3Pj/4dj+482gO3ze91cXpJEhcY/+:1ISffRbbM6Be9pnsUr2Fe91qEhcY/+

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2