Extracted

• • Target

    file.exe

  • Size

    1.2MB

  • MD5

    3dec4ba33d31a611dc09b12ab554fd82

  • SHA1

    8f2a7fa7c80481ec70cc12dde87b1e11c168377a

  • SHA256

    040ae23367b95517122866faa912a0198e23ee2aa966e5073c5a27049724f46c

  • SHA512

    ceee90aefa6e78c1a52ff04767807d9c939a1022241c6a6e795ec6289871bacabec4080611861c006c31d16bc3d9765f48147f556e77c6a1d8aff955aeac16f7

  • SSDEEP

    24576:q20I2/PNBkQwxTmRQSPPf7LUStJ6KYH2gXC75ld1qSVpk:q2xTmOSPvUSSzyd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2