Extracted

• • Target

    file.exe

  • Size

    2.0MB

  • MD5

    7d5cd50cd4a731749dfaf406ab817ce4

  • SHA1

    5932f7cd8c741b8749b3b85071b386408346dedb

  • SHA256

    aa46e9274b68194805fa9956ec4a6cd5357f9f6244aea7c38b9f765455b47a5a

  • SHA512

    de739624c1d7bf82deca4a2844ca58903d3729d59a59de72f8d758783d2dac7da6b093e1a4350a064975cb003e27480e32079b97c37d5c2905a8c67484908fee

  • SSDEEP

    49152:y2+et2GDs90V1xKlt/dZI086RgJEWAK08sbMuMo6I/m/WahOVLH:jJ2z90Hxo/dGEaJJAK0Qzoa/JhOVLH

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2