Extracted

• • Target

    813a94d5b7fb26722f6fceaefa7b5c910193a497d809ca36beb3242fcd932d91

  • Size

    2.9MB

  • MD5

    2e4102f430a43d7625ff2709767f5ee2

  • SHA1

    0cbc3374076a91287f45f0a88d65746227cd349e

  • SHA256

    813a94d5b7fb26722f6fceaefa7b5c910193a497d809ca36beb3242fcd932d91

  • SHA512

    2fefb63ece9e4587bcb4eae32c1fbe1c205a916fee1521d7f71c714bdab7dccb2d31f55684e2692409a0072921834827696a0a3f005e5cb22924178e8fd88624

  • SSDEEP

    49152:Z2O86UG+bb4jXkZs1xq3OebBKuK5qHjKRm0YJdGOm+privDjB5sGugHh9+A5hq:MO8vGI4jK3OeP0q2mzdGMrivPBGGlHhC

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2