General
-
Target
file.exe
-
Size
1.9MB
-
Sample
221222-17cd1sae71
-
MD5
60ecb19d438dc3dba9acf5bc3ebffa8a
-
SHA1
4f6b98f8e213821054f0a3561f3ebafa1e415725
-
SHA256
c3a724617929019dcffa5ab254fbfc0747b21748496cdf051d02a79051beee8b
-
SHA512
82acd3a5e0a2582a763222bef21e50d032794c2c0b026b914fabb0e0dc511d644a8068e0eac0637247cffed8fd6a361148f8b24733d3179470a3f0db6c0ec428
-
SSDEEP
49152:Xm4IDJTzglG11SsnI/BgdOeuEJuE7D8sQdTxlWP7p3h:Xm4lcLnmlq7DNQtxlGdh
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.9MB
-
MD5
60ecb19d438dc3dba9acf5bc3ebffa8a
-
SHA1
4f6b98f8e213821054f0a3561f3ebafa1e415725
-
SHA256
c3a724617929019dcffa5ab254fbfc0747b21748496cdf051d02a79051beee8b
-
SHA512
82acd3a5e0a2582a763222bef21e50d032794c2c0b026b914fabb0e0dc511d644a8068e0eac0637247cffed8fd6a361148f8b24733d3179470a3f0db6c0ec428
-
SSDEEP
49152:Xm4IDJTzglG11SsnI/BgdOeuEJuE7D8sQdTxlWP7p3h:Xm4lcLnmlq7DNQtxlGdh
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-