General
-
Target
file.exe
-
Size
1.3MB
-
Sample
230111-hamvdaed5z
-
MD5
d73bb80569a1f4ffd799a90be2ddc70f
-
SHA1
cd3c38a80a440ae3149ad9f068eef14094184316
-
SHA256
8272b177a75a185528fd65ab8159e238b4616f1783a8da674160fd0f207dd521
-
SHA512
cb7c45d2a29b7321cc012af7ca374c3de84cd5c192eb7ae2b56ec2de98b26546a71d382a4423d9fc50562685903f88a29d671c45a599df025e763359e11a4c2c
-
SSDEEP
24576:q20IJRAG3Dq305OIyLrzi0HaABu8YMRo6JfJyTpE5FnAjOtOagXC75ld1qSVpk:q2YGG3PZHlBJYko6RY65FAKOed1qapk
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file.exe
-
Size
1.3MB
-
MD5
d73bb80569a1f4ffd799a90be2ddc70f
-
SHA1
cd3c38a80a440ae3149ad9f068eef14094184316
-
SHA256
8272b177a75a185528fd65ab8159e238b4616f1783a8da674160fd0f207dd521
-
SHA512
cb7c45d2a29b7321cc012af7ca374c3de84cd5c192eb7ae2b56ec2de98b26546a71d382a4423d9fc50562685903f88a29d671c45a599df025e763359e11a4c2c
-
SSDEEP
24576:q20IJRAG3Dq305OIyLrzi0HaABu8YMRo6JfJyTpE5FnAjOtOagXC75ld1qSVpk:q2YGG3PZHlBJYko6RY65FAKOed1qapk
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-