Extracted

• • Target

    file

  • Size

    2.0MB

  • MD5

    4a798e74d011a6e49d1bf20495bfa14b

  • SHA1

    6038a21ec8d77964f004a1bc1286778614e212a4

  • SHA256

    5d94a32cfdde62a43ec565d0c7b02a89b967571f75d3aa18e41df1f559983dc3

  • SHA512

    8f2ae59dd0056e2edee3b378c9dece9a9fdc1296a3eaf6c3cc6c630f0a1c8ffedec83718c253dedb4cf588c23f76ee797d2fe86eda1c810eef074f1efb66614a

  • SSDEEP

    49152:MljVLRUnOgXtbxFaqXS6iIYoiYusp5TBDex7AG5cyY:MljVOnN2nIDUspBS7XcyY

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2