Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    9b6865531640e976b277dbca8c0ffb88

  • SHA1

    584543fa774fa7c8f9d6d173d04f98c0bc81eb54

  • SHA256

    09449a23234605606f881fe6c0c88988e674bf263a1bdfcf3557710fbd72b90f

  • SHA512

    c6597ea0bbb4f6da30fbd9979dd2cd3c1c26565183a31249057e3b553f8047179f48f76f78b5ff2fa1082eed13cf5649d96119222d3e84e70287c13ccb50560b

  • SSDEEP

    49152:iinmp/VfErEgBSxcRJsBIegQDr+J/UNcc5OnjLX/nvYX0m0:iinGV2ku+TbD4/UR5OnjLvvYU

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2