Extracted

• • Target

    file.exe

  • Size

    2.1MB

  • MD5

    50101e98e33d37f43dcef96003d56b36

  • SHA1

    c2a192a084c4dfe97c675931869f79b5ce1f62d4

  • SHA256

    e8aacc014758fe6502f46e08a8e1abd3b5c1fdb4fa6f6c47596763dfd36fff8c

  • SHA512

    3ef75c14d84b26fbcd42f729503d65640a721c89af5c411d319e57321ad3df09b061ebc7b0b5912a844eac6316a52b368427875b31c154244f1035998f476539

  • SSDEEP

    49152:2iAw7H/MQ5Uu89cyVR98cxMt4ktRDjLX/nvYX0FJx:2iAokKU1KyVQoM2ixjLvvYuJx

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2