Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    39d312bc74305493e5ee02ffa5010092

  • SHA1

    97574bbe0d5c7c234099699701a5f3b88ed555ce

  • SHA256

    3c56dc35b83a80e8b562d4fccf9b2487db0638030510ab95a41c9422f63c7194

  • SHA512

    b5761492ca7cb0f5bcafb46d1e951a678c302c9404fe3ab1ceed5ec5af3072c74370fd6ca7cab8768bcf1447846327fb0901e1873dcc1b5d4eea631b456ea8bb

  • SSDEEP

    24576:220Sx+ZMicpJgt6Qq3vmm1AQn0FyvmR921ChWCugXC75ld1qSVpk:228mjt6UKcCcCqd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2