Extracted

• • Target

    file.exe

  • Size

    1.9MB

  • MD5

    dc1dcb5e7ae3fafd54a7d2619eb7caef

  • SHA1

    830ea60df55b51c4fbfea794773859a0e8bc591f

  • SHA256

    057268fbf3629abc052557835338b42fb91b15eb6e88aaa4488c7be2db6b32f5

  • SHA512

    00664c91bad7f127b926ca9991a180d96a006694eaa4302a1472028a50151e5adf6e24aea6b0a1ad24057ec1dee0035d0491df3c8bc638a9f9f2a5dd46809a22

  • SSDEEP

    49152:GiPqfbw7UK5F6LPsahNL8aB5Ch6CGl/4cZ:GiifkJGU48a/Ch6hL

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2