General

  • Target

    bc52a266b08e6bdf187513bc29f1384654583b57e6c10d4716c170436cb6778c.bin

  • Size

    244KB

  • Sample

    221220-w1n21sdf9t

  • MD5

    e0b025f5d840d565743f1643d2304a01

  • SHA1

    74520cb001e132224fae8a26132e996f7ae91c8f

  • SHA256

    bc52a266b08e6bdf187513bc29f1384654583b57e6c10d4716c170436cb6778c

  • SHA512

    ce7f741efb73d6554279f7164a0a9635d4b44928d4a79a12a81555e88ec264c5875acf18d88d725770ff0973dbca5dd8572af93757781452c0fdb5d485b01e6c

  • SSDEEP

    6144:PKMOAd7IF9Zr3Tz5s1BOzCtUy020kkj2ppKAOkLJi/Z:SMOAd7IbZr3Tz58BOzO3KoOZ

Score
10/10

Malware Config

Extracted

Family

nymaim

C2

37.0.8.39

31.210.20.149

212.192.241.16

Targets

    • Target

      bc52a266b08e6bdf187513bc29f1384654583b57e6c10d4716c170436cb6778c.bin

    • Size

      244KB

    • MD5

      e0b025f5d840d565743f1643d2304a01

    • SHA1

      74520cb001e132224fae8a26132e996f7ae91c8f

    • SHA256

      bc52a266b08e6bdf187513bc29f1384654583b57e6c10d4716c170436cb6778c

    • SHA512

      ce7f741efb73d6554279f7164a0a9635d4b44928d4a79a12a81555e88ec264c5875acf18d88d725770ff0973dbca5dd8572af93757781452c0fdb5d485b01e6c

    • SSDEEP

      6144:PKMOAd7IF9Zr3Tz5s1BOzCtUy020kkj2ppKAOkLJi/Z:SMOAd7IbZr3Tz58BOzO3KoOZ

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

MITRE ATT&CK Enterprise v6

Tasks