Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    820c8c1565cfd61cc761c78b6636cd69

  • SHA1

    9ea7709d8053c455d7180e1c4a6ebd65682ef500

  • SHA256

    aa28282879d0c945994f17b9deebdf36cdf6026ccc1e6594501147bd483aba21

  • SHA512

    4e5c8708530bc1106f55b0299949bb7599ed1499eff153756da02e1bb2ac56345a696566db6128b06833bc62ab3da445f3b691d07810fbe2e68a202b0abf4059

  • SSDEEP

    49152:jN+oajEaIU0tTWe0qnyI8xW8VnakMlWP7p3w:jcooEXU+aXCy7W8VQGdw

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2