Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    09071fdf91df736905ef7cca772726fb

  • SHA1

    57993091d8799a3d1d395cfe2ab1922b7af89a7a

  • SHA256

    1946712c5e2dd8060bc163d25a5a27c25d4ab69e75b54f41d97694b069a6ddcf

  • SHA512

    c9d7430b2f8c2d29549fa7cd411818cbc3533a9647790522bbd41d2c12eff6152b16152d6d483ecf4162ba947333c86120be22ef559cfd6a2c970a9ba33192f9

  • SSDEEP

    24576:Viz85sUY+u+CwAwqyNQpaQo847BQOD6KXpApYeV0KtAXnDJQfV5SKOWr3bZWcUf6:+ZUDckxiE8YD6CEAnDJbKJ3bZySgzxK

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2