Extracted

• • Target

    file.exe

  • Size

    1.4MB

  • MD5

    6b2c9fbbf37350268c4682c2cd52e5ad

  • SHA1

    5bb9d2f9368371429ed9bf31fd89cb6ded00fea7

  • SHA256

    416215873c4f1e921886bc4612929d8620e83e554c41b07cba91e0272e03a540

  • SHA512

    2a31f4034a2c27918537e483343b7cb199a1ec0205bf352529a7dee23cd97812af4ed03269de188bebc238afd7312c4d89d077dbf1e210be00c5836183ce0904

  • SSDEEP

    24576:q20IJ1C0z7PpwpRw7v7BAVcJduwSj/A+Gi8ZFz9epHpJcIpgXC75ld1qSVpk:q2xzOpu7vlETGz8faIhd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2