Extracted

• • Target

    file.exe

  • Size

    1.7MB

  • MD5

    7d92fd33659b87367cd670ce5f7b3ced

  • SHA1

    05cb99e133b0fa94867c1fc74dba665f001ce89e

  • SHA256

    fe15c77665d818fde353c38aacae21f839a2766d4c5d5b5917a214ca31b7a9ca

  • SHA512

    0c9783efb28e551603d10041d9d34128620b49eeec60bc422e746710d0c3c0d9007722ab6b847d40988c955ca46840898014a21cae2e96e92059811ead825a7d

  • SSDEEP

    24576:220Sx+xtzwyC4njmAksyKJgvJ00AkUDn7aTz8GfGgXC75ld1qSVpk:228jwyJjSuOR00IDOTIGqd1qapk

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2