Extracted

• • Target

    file.exe

  • Size

    1.8MB

  • MD5

    cc35b26636b57a4be2806ff4c816500d

  • SHA1

    0651bcd67fa54b8adabee899fd41465b9f6f957d

  • SHA256

    4cc90f23f20ec979721464c8bd4ddd04573bb2db1faacfc424ac25fb93590a6d

  • SHA512

    b97fef462e099cfb98277bf71eb1942c701fdfcf7a73f8c375a6302c70068c0341e027d4222aa2655365828c19daf4f487e20bd4e2d164e06d2d26f3c003ceff

  • SSDEEP

    49152:UiwG1r/CYVIED4PhbEFYUZVBvIYF5BISz1JlBEGH7TJKuzdpokNpi:Ui34GIEDqZbm7vh5OMbeoxKuE

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2