Extracted

• • Target

    file.exe

  • Size

    1.9MB

  • MD5

    3fba31af841b8ed5c9e3d1b78a832657

  • SHA1

    43633c641cf896b016ef23ed5c5c59420ea2d691

  • SHA256

    9634f77490055d634e82063482252c5fc761b17322376df5f6d52b58f0845170

  • SHA512

    91d256704e7da13f4724baf8387f86b250c1863ed2f0937b474495c0f20759e373ba2bb4d25ddefcfb4935387222a9325ea96f027096ed3c82fef955fe892f95

  • SSDEEP

    49152:0i/MZEP8AUToXCLDVAOzfylUMozV4DlKKw21zq8TNp/:0ikGjSPVAOzSeVC9wUzq87

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2