Extracted

• • Target

    file.exe

  • Size

    1.3MB

  • MD5

    9d08daf608f280bce5b0920e20428d57

  • SHA1

    052f1c1f7a213f3b32bf6f6a232d46515a7e9649

  • SHA256

    e204ab9ffa6acdd07a83ed76b29cfcff4e6486e4414a05e032bbe1c350142fd0

  • SHA512

    1b42d60f85ca61498b6fbe4d4fb0d425a2857854b7339e4a2724fadf2e10943e97669ddeb300a9fbed64e80d2b007fcf28d3ec13673dc5e32846d2236eaaf609

  • SSDEEP

    24576:g20hhVFrrl4Izgx3K1OVj1d4pqaoJ9StfN2kllfocOAYf+kATuCqtn/:g2QVhp4ygx3BVBGpDoJAqoWOkATuCE/

  Score

  10^/10

  nymaimdiscoverytrojan

  • NyMaim

    NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

    trojannymaim

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2