Extracted

• • Target

    file.exe

  • Size

    1.7MB

  • MD5

    f7042bd78752106803d168f48de240c0

  • SHA1

    28077321d5de47b41951261056e8667f5a01d2d4

  • SHA256

    2434ad28285178dc046ad8a445eab5d1f561e5a5a6eeab8bf70b5c53dd7e11ca

  • SHA512

    20abee8cda8a48973954cb5ca490fda739adf6be049afd396426520d85eb820f2aab59d6832d272903623a9caac4f2c5fed3c6de9ae36f06007ec5ae0cc8c762

  • SSDEEP

    49152:228rPuC7JIVvPt/KxD0UVRZmLm/uBd1qapk:PaPt1MPt/KxVHZa1d1Zi

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2