General
-
Target
file.exe
-
Size
1.8MB
-
Sample
221223-xn8rbscc2s
-
MD5
2495ec3a848d1ce35035c564c6cb6d49
-
SHA1
af29a9e99f327592945b6e52b3fa2395b359d357
-
SHA256
b740821f0505122a2a914629a03cef80538d4934fc411049dda122bbb54c3863
-
SHA512
91076f2953db7395c47e5f166a384f66f3874044f9a9d97223b4c0e4c37cb3a1d079a32d14032e45943ed826153c4d56ca72d2664e5c8c934b8f7fd6f3fdc2d8
-
SSDEEP
49152:fbwaYvGkpxR6PlKWievIrrq5LzxWOvW0iWwsejEWP7p3k:f+ekpx4Pl/ilfq5L1WIWzWNegGdk
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.8MB
-
MD5
2495ec3a848d1ce35035c564c6cb6d49
-
SHA1
af29a9e99f327592945b6e52b3fa2395b359d357
-
SHA256
b740821f0505122a2a914629a03cef80538d4934fc411049dda122bbb54c3863
-
SHA512
91076f2953db7395c47e5f166a384f66f3874044f9a9d97223b4c0e4c37cb3a1d079a32d14032e45943ed826153c4d56ca72d2664e5c8c934b8f7fd6f3fdc2d8
-
SSDEEP
49152:fbwaYvGkpxR6PlKWievIrrq5LzxWOvW0iWwsejEWP7p3k:f+ekpx4Pl/ilfq5L1WIWzWNegGdk
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-