Extracted

• • Target

    055e6a24bd1c1be8d79a4179d4834408.exe

  • Size

    1.9MB

  • MD5

    055e6a24bd1c1be8d79a4179d4834408

  • SHA1

    83f2308e3eeaccf9ee9e5c18b83a07d626faeb88

  • SHA256

    ff6a572b9dc9198bedb8f970bd3426eb3148b07d112e9fbcccc29f17bd5e7ef6

  • SHA512

    7778bf5ec91676145dc258c88af0d2dc5bc33362cc6d3c3778a5128bd82a1fee448f7b8b5e61ee92253a888a6e9ee698b86806d248c73dc5000e6d2b505fa0e2

  • SSDEEP

    49152:6iPqfFBc/tgsKpRwzTx1a/30Zd/Ol/4c6:6iifY/OsVF7/aI

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2