Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    267fd1c11eec40d944b51c14ccad523c

  • SHA1

    7f15e3acc98400d131d32d01c02096acadb19696

  • SHA256

    ce76deb7d78709f25d70e66b44d3fa785189436deda24042e01df42814ea365a

  • SHA512

    94f0a934e744067a8e4eb4e09344e99deffdcf6cfa6406d94869b44ce917ec1b518eb88af7800dcbde18fd118af2428774d2fc3ee894d5cfdd001c3a7e862b9a

  • SSDEEP

    24576:q20I12B4mJB8rD3HnKC8U9ENDk5ZicVKSgXC75ld1qSVpk:q2IB8rD3/9EJk5ZiyK2d1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2