Extracted

• • Target

    file.exe

  • Size

    1.3MB

  • MD5

    419bcd282d6b09dce05cd1c9b902c2ba

  • SHA1

    61d434edac31cad7d789dab7ad6f21edc2e6628e

  • SHA256

    17168e3b1c821cc4724bcfdfd25c818cadb74f0d444623797566ecd4fa8c2e9e

  • SHA512

    805bb42a006b1f72d1e72375fd629d89cd0455b7b169c0f6014bb1420e49221f3f4645e06ea320fd8459d9bc12f414112772de5c65f3e55d6348f6ed59c89ce0

  • SSDEEP

    24576:q20IVHfEkIMSLAzIBisd6Xw7czymRQBGRdGd8gXC75ld1qSVpk:q2YMSLAAizA703RSkd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2