General
-
Target
file.exe
-
Size
2.0MB
-
Sample
221230-bq8y8ahh71
-
MD5
5019b55cd3ffe990d54cd5d8aa7a03fe
-
SHA1
d6950413ab7eb9b187bcec085155026bc90925aa
-
SHA256
898a4a330c335f4d917f28dbd99ebf68928cefa97a4f9e6be89c15d77d794e46
-
SHA512
659773b65b44706b9e1aed22ac8c08347a14e0182a23c8c93a6a9f806b41146a4df1449d68e3fcf3770faba88fee19e21031b2120a287e8a9f5f4233fc97dc93
-
SSDEEP
49152:9iC9qVNjtzAJtOn0YN+/fJA1/eIYqP4+Hth964:9iqqrtLu/fu1jH4+HtHR
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
2.0MB
-
MD5
5019b55cd3ffe990d54cd5d8aa7a03fe
-
SHA1
d6950413ab7eb9b187bcec085155026bc90925aa
-
SHA256
898a4a330c335f4d917f28dbd99ebf68928cefa97a4f9e6be89c15d77d794e46
-
SHA512
659773b65b44706b9e1aed22ac8c08347a14e0182a23c8c93a6a9f806b41146a4df1449d68e3fcf3770faba88fee19e21031b2120a287e8a9f5f4233fc97dc93
-
SSDEEP
49152:9iC9qVNjtzAJtOn0YN+/fJA1/eIYqP4+Hth964:9iqqrtLu/fu1jH4+HtHR
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-