General
-
Target
file.exe
-
Size
1.1MB
-
Sample
230111-a4n1jadh5t
-
MD5
910563e2080405e5598644a02a1539cd
-
SHA1
72c0a78a089d8922eecfc73d1ccb6cad95eeba4a
-
SHA256
66c220af69235ebdadea7a624179cee1b2ed950d09d327b927187ddd43f907ef
-
SHA512
de1cb91e4058979e31022aca2b9a1d951de9943fccbf82c5383cf8866a96ec9cf5678f7892c9cc51c906595ad951a94811cd138a9a4fc513c122923b460f0e82
-
SSDEEP
24576:R20hb6cyCOP/jLR97fbsDAAAb9QG3NS7VhOwaa+hFSkl5l/Hld:R2K6cyCOHjLRlbRb2G3A7VHaxhRl5V
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.1MB
-
MD5
910563e2080405e5598644a02a1539cd
-
SHA1
72c0a78a089d8922eecfc73d1ccb6cad95eeba4a
-
SHA256
66c220af69235ebdadea7a624179cee1b2ed950d09d327b927187ddd43f907ef
-
SHA512
de1cb91e4058979e31022aca2b9a1d951de9943fccbf82c5383cf8866a96ec9cf5678f7892c9cc51c906595ad951a94811cd138a9a4fc513c122923b460f0e82
-
SSDEEP
24576:R20hb6cyCOP/jLR97fbsDAAAb9QG3NS7VhOwaa+hFSkl5l/Hld:R2K6cyCOHjLRlbRb2G3A7VHaxhRl5V
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-