General
-
Target
file.exe
-
Size
1.1MB
-
Sample
230110-neacqsbe7y
-
MD5
5f7b012c3efaa44fb1c8d93fa20be9f2
-
SHA1
437c91c31278549dbc5ce301fbbcf2c534664772
-
SHA256
94a59ed3c974c12c403e8f87790fb700d51d2f22e01a479dc160099152722845
-
SHA512
afd5fcce442508c012fc7b90716a02f249410e7f2ac4ca9890ccbaa35eb4e11a9b667b5522b919074963f00cd40ccb5b6c3fb3b656d8bf20806cbfab88166fbd
-
SSDEEP
24576:R20BBpEp105zP1A44XgbeVkQlQknQ59Hw7kvKZSSkl5l/Hld:R2qg10NdA/X7VkQlQAQ9H/v2ol5V
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.1MB
-
MD5
5f7b012c3efaa44fb1c8d93fa20be9f2
-
SHA1
437c91c31278549dbc5ce301fbbcf2c534664772
-
SHA256
94a59ed3c974c12c403e8f87790fb700d51d2f22e01a479dc160099152722845
-
SHA512
afd5fcce442508c012fc7b90716a02f249410e7f2ac4ca9890ccbaa35eb4e11a9b667b5522b919074963f00cd40ccb5b6c3fb3b656d8bf20806cbfab88166fbd
-
SSDEEP
24576:R20BBpEp105zP1A44XgbeVkQlQknQ59Hw7kvKZSSkl5l/Hld:R2qg10NdA/X7VkQlQAQ9H/v2ol5V
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-