Extracted

• • Target

    file.exe

  • Size

    2.3MB

  • MD5

    d884bd13c37bacce1dde7e81f1e03742

  • SHA1

    170c9f0cad512642430446278ea5a9a56b487ef5

  • SHA256

    413194cacd64bbef719106eccb6474653b58d77042e42c10b2665083cf828002

  • SHA512

    0fcf76de6099513d712f09039ee2275af25c0664e9db1c30092c6bca282b85da77ed5113134a32a95d3a670e0e6cc57ae132fe9016b61ae2894b5c701d7375bf

  • SSDEEP

    49152:X1JQTcuFQnfJfbepfH/9UG15WluQpVXEczb/rswhsvkF5obm0V/PIcA:XkTcQ+JuPcsQpV0sb/wwhoGwm01I1

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2