Extracted

• • Target

    file.exe

  • Size

    1.8MB

  • MD5

    4a130214fdbf98f67499a9a0fecb8d81

  • SHA1

    6be5a2bd8ccd29be5ceea33f9e60ac4802a51859

  • SHA256

    1422846714919d4cfec06a9a08fafdc152d2b5286fa826c4675ccd9de9026c2d

  • SHA512

    e14b2174158a3aa614d96976f338f8ecc69fdb813e43b4f7c7114705ab3540dd2a323230883f4955ea0e8d9ae1ddc83b6e1b266936b08d9d275800b3033adbad

  • SSDEEP

    49152:Qi18PNPFMYzEo5AqhzuX3hXaE56OxdElNpQ:Qi1qPFzztPh+3VN5rxdF

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2