Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    18492a35e3353c23efc0332d0c737d9d

  • SHA1

    ac2160dfcd64230d8ad144219003cf2058cab2a7

  • SHA256

    b873c4e9390f06028ee1fd498e4f5205ca97ab6a24606c45cded14e1d29a5b1f

  • SHA512

    696073a497db2e622c4b7ff47929eed8ba347ebb7c08f189a3568a13f95ae94d4f19018e008b2cf08735a3ac97dacb7c4580d9d32b1d58fb5d1dc97f0cf3a5a9

  • SSDEEP

    24576:q20IKa2ewNOoWjRi56an5cWUA9lfKhyuJx2CgXC75ld1qSVpk:q2sewN6RiRaWUAMLrd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2