General
-
Target
file.exe
-
Size
1.9MB
-
Sample
221227-2v4s6sbg9v
-
MD5
6a0f6253e19364218f1f99750ddc89d3
-
SHA1
7b437d65306be1e594536ecab7c555a5db53ff59
-
SHA256
63f86f68c22ce592a2064958357e7d7dae8f6460ce960de79f120f1d036daf23
-
SHA512
e419669bdab23c3710c6f92191bf39fc98b43394d1d32acb2a5dc10e227ef5910c81070b5df330c77f1debb2c44439236327e4a66d2378390cf42531a718b42c
-
SSDEEP
49152:miPqfuni8Ib49c//kvE9p2MEavcDVTEb6hMBypHO1jjRQl/4c3:miifP4C/kvE9pjEavYAbNo4tyl
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.9MB
-
MD5
6a0f6253e19364218f1f99750ddc89d3
-
SHA1
7b437d65306be1e594536ecab7c555a5db53ff59
-
SHA256
63f86f68c22ce592a2064958357e7d7dae8f6460ce960de79f120f1d036daf23
-
SHA512
e419669bdab23c3710c6f92191bf39fc98b43394d1d32acb2a5dc10e227ef5910c81070b5df330c77f1debb2c44439236327e4a66d2378390cf42531a718b42c
-
SSDEEP
49152:miPqfuni8Ib49c//kvE9p2MEavcDVTEb6hMBypHO1jjRQl/4c3:miifP4C/kvE9pjEavYAbNo4tyl
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-