Extracted

• • Target

    7a9e33c5307748d5eda1d300f55a0d5efa045edce88bf6d4e2806393f65580b8

  • Size

    2.1MB

  • MD5

    c9047d22ee6551b3d663d7084f3d1ed1

  • SHA1

    b9c1320eff08005e55334ad374260d8cd3d787ca

  • SHA256

    7a9e33c5307748d5eda1d300f55a0d5efa045edce88bf6d4e2806393f65580b8

  • SHA512

    504157f7f4d0d5fbc029a491f87a49f24c3c5f45ce7fb32ecb8fce5451912c84b06cb47f3ed0741148b0df6a362c2828dbf7fb948cc5f94622f10f74c9b49c3d

  • SSDEEP

    49152:2ivLILyzK1IFS97Cyy1W1YPYkakGsbvjCYef0C6sBCu319UDXKY:2iv8pK8eyy1ZPZakXyOs0

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2