Extracted

• • Target

    file.exe

  • Size

    2.5MB

  • MD5

    78933cde5eb56e5217c397743e4aa677

  • SHA1

    f2b2a93d483104271fd161298fe0503e5d8e657a

  • SHA256

    f0853360e376af5dfa30c090ea6c91c9786351c3563b9026394d7aec1e218aa8

  • SHA512

    3bcb3335d9aba55980b2ef861906d17317d36ea84c04a2fbf813d814f1390509152817ea13791d9060256b2d7bfa3adf68386aaad38098cc9e364fae5319b390

  • SSDEEP

    49152:Ep6vYAiSX6oXMkkdwdlBiSHaMCFXQh2GuJdjrsHeOCgSY/imH:EpBKX6udlXhCeXuJScY/imH

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2