Extracted

• • Target

    file.exe

  • Size

    1.7MB

  • MD5

    3262fa8631bc46eb81f6393cf50a72bf

  • SHA1

    b096feec01a9da7b154deba41ccc0ef99b96f495

  • SHA256

    8c5ad87df7a082e501ea0bd7fdeb2bf74fd2b3765de271e47353daf2bb0e8553

  • SHA512

    2560d9d1aede074e76d480ffca2cd09845a5b8852e36dc83cb269ecdce7140f2e98f42491b56279e4314bf3ad016d2e156fffccb5ac74e9c211836b59cfb133b

  • SSDEEP

    24576:220Sx+rmpteV8qozhr7lQx1JOau8k7A7DX4CeKiNgXC75ld1qSVpk:2283vozhCJM817MCeb9d1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2