Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    85a1e598ffd0f3278ac583bf1a13f5c1

  • SHA1

    54803894af791506f75c6c44b1e07d89c8bae9d6

  • SHA256

    cd7e585c5210c79d6970caf6a55bb27bcdf1776e4a99a81974159a5a2c9ee58d

  • SHA512

    ebca9ba5350c00b794082e4b55140d37fe1cb478d7d96027ad355e254d4c73eee629b767903cc74ec61eda54376b9e5a6054762cb1a4de25c9a47f7a24606183

  • SSDEEP

    24576:q20ID/3U1fOQHD5DAb4WhjJf5JszgRz+hYxPgXC75ld1qSVpk:q2z3Yw4+f5Jf9m2d1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2