Extracted

• • Target

    file.exe

  • Size

    2.5MB

  • MD5

    7dc58f88b0d1c37aae28fa0854f5796a

  • SHA1

    69e495449b3beb185517c8b4fef3aea5d3a4f40c

  • SHA256

    053876ce93eb32b9a63d46a6f71533c59c2ad8fefe30ff7c6d92f62ee12cabe6

  • SHA512

    e1e20e0b8794df6f9e65267ea17c651d8d74285757ea8a574216b3045e3c15f873e51ad9caa1336354abbd6f147fcfb731b4b5a12a7e736b5a61d66bf7155f01

  • SSDEEP

    49152:N0PBlob+781YdnmFoA41sy8Kar3DHGoDD93bHxIZoTYLaTAM77Vf7O/d3HV:N0PBbDna3ZzDHGc3bHx1cQ1Q1

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2