Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    2ab0fa8cc7d3a846f66c93d9cac18bda

  • SHA1

    36cfc6ec0178d26f340fc563b2864c083bfd518b

  • SHA256

    61031d727344e388b50f3edf84b3951fbd684226af52534a43d357790b8dd523

  • SHA512

    b11f762e8bb3bb1980b05575443c27bd54aeb6958a32e9aebac6635239551ad9eadf7f85cc55f7b2680b9f84aa173de9e220d11726d37e01ccff072a6e57759f

  • SSDEEP

    24576:q20IwPqTsiXl1kbiMdKarS1qaneedt+VebcMzJzOaF/Iuz52aJeegXC75ld1qSVi:q2iqAACbiMHrfBed9YM1zOa92axd1qai

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2