Extracted

• • Target

    file.exe

  • Size

    1.5MB

  • MD5

    8398a8de57fc6c61bb5c6ea778384b65

  • SHA1

    02ed41bb23232de6546f7010aabafbd53d096b05

  • SHA256

    946228071773c08d69bb32172d5267c1b13cbf1b7c7faea5328eb1d9bc3dab07

  • SHA512

    bfa7a54189497b325bc4ca4f657a715cbbc55bf4c7710b4617adeff881190b00638a961cc9538ca92ff4af98cd126ec232b16e5001c43a264e402293b7e32945

  • SSDEEP

    24576:220Sx+IA4nUz9L6f24e9H+2SBIZNut1pyjvKgXC75ld1qSVpk:228aUz1d4edCcNut1pyjud1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2