General
-
Target
file.exe
-
Size
1.2MB
-
Sample
230110-w66t1scg2s
-
MD5
2ca9afd6621418b742f3afae4a009129
-
SHA1
50d57b5da1586571ebb4946cda7c6b29bb9195a1
-
SHA256
1ff520d10fec4cfdebd6f72b2aa8f3910b90eb706dd10044075599994a3a3aff
-
SHA512
45764e5db0deeef07e11a095deeb511d2127bb95a2b582c010e892ddab7601f476122ebed6975fc998fae983c87b2d65e6627612fe234c8887aea2b01c3b4fbd
-
SSDEEP
24576:R20VAky8Gi5svLpk5FSn0sVz9zGdZGH6h71nqQaSkl5l/Hld:R2zkr5O9kLA0sHCdZicqQgl5V
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.2MB
-
MD5
2ca9afd6621418b742f3afae4a009129
-
SHA1
50d57b5da1586571ebb4946cda7c6b29bb9195a1
-
SHA256
1ff520d10fec4cfdebd6f72b2aa8f3910b90eb706dd10044075599994a3a3aff
-
SHA512
45764e5db0deeef07e11a095deeb511d2127bb95a2b582c010e892ddab7601f476122ebed6975fc998fae983c87b2d65e6627612fe234c8887aea2b01c3b4fbd
-
SSDEEP
24576:R20VAky8Gi5svLpk5FSn0sVz9zGdZGH6h71nqQaSkl5l/Hld:R2zkr5O9kLA0sHCdZicqQgl5V
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-