Extracted

• • Target

    file.exe

  • Size

    1.3MB

  • MD5

    7c8147c1ade5ebfa17826aa7fafda704

  • SHA1

    be1bb112cad17efe01fb8ae2b5a91c43764c37b7

  • SHA256

    70362d2d2a87da8c707b7b811671fddc74001b4469913f49fb786f744c4e4898

  • SHA512

    0f6e836d13f264786a6b54164d5138739074473e9f092aedfce0a4c115340cfc58ae6baebecde765e745b06a89d09e43982ddcc52a930f4fbd02cf491dec2bbd

  • SSDEEP

    24576:q20IRmt1zEOQ4+IqriI+33aoeDTlb77B8bRB1gXC75ld1qSVpk:q2cbJXz2P+33Pef577Bspd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2