Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    55758f9d8f43f9f3d90466865558e8f1

  • SHA1

    4af0541b910fe933a4d694cfbbadeb5b201b6e56

  • SHA256

    572bc3952f40c67490f174ca5f7abf8c6f7b7d67c8306bb2a2c0a3aa76797faf

  • SHA512

    716f1eed6dffb79f8ad22bb3ec144342a4b54be4788b29da582d915ff44f42351e3ee042f3060e9b2b5ecd957e95b58b14d86c560c076907ae37e2f114d8f23d

  • SSDEEP

    24576:q20IjVkmcw2VNT/CJvjtreOTe5bbnqprPvaDUdSrKetLnygXC75ld1qSVpk:q2hsV9aRtCJ5berPvAUsxtbWd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2