Extracted

• • Target

    file.exe

  • Size

    1.8MB

  • MD5

    27046698de7a3d6e5f5857108b4093a7

  • SHA1

    d3bb9760a390101f4ca5d445e357b357deb84b64

  • SHA256

    77c2f269bd667b5af744fb15bd8a4e303367e787e1418757cc92f44611049a7c

  • SHA512

    f2b91623b692cb38b8f6769c3ef7044ad67658e37f91c076967f5442d80c3aa4367b7beef7d8cec16f1f2a92c0b1a33b3a69625f4a477a007eec3fb6e35df9ca

  • SSDEEP

    49152:Ii/tvjCyUs6Hx5U/hRkqnDcdISuv21eo9IbKuKmRvLpFR+DI21MSBk3u:Ii/tvj8se1Cwugb9KKuKmRDpb+UHSBke

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2