Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    93a2a0a08b996baaa9dc622cfe61b281

  • SHA1

    cffcf779a911575b6827d69c61be6aae1e63db63

  • SHA256

    a0c20c29775983630dfe8dc5fcfa7daa2c23076b9c2dd8ac620e10b1f63c040f

  • SHA512

    22223fb40a9ccc5824aa694bfd65b34f5ab69e6eb1452d93841f90cdaa39214f66de920a696d2eb40f8155b3d0491e75d131e33d5a5f8b04803088844bf7b17c

  • SSDEEP

    24576:q20Io6J0hhmjiNFnh4IrCVx5V3nD+/DawnvHbVN8TJmyRjZkZC/gXC75ld1qSVpk:q29K5GIC5V3KawnfbqXZwCrd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2