General
- Target file.exe
- Size 364KB
- Sample220919-e7874agcf5
- SHA256 c6a15b35a1fc2a1c4f26f903117e71ce5bc21bf0b2a5ebeadd12e7214c8417b8
- MD5 1a1e5d900fb4f664b16da2882956bca8
- SHA1 79cf4d46f1563e9fbd9ee031f566a5d74fd6c5dc
- SHA512 936d811220c6a2e81bb7e55a906c3392e4051aeb2b8eec9c0b9c542ac4eb44dd10eeab1ae2c9d98a126d5f3f32631e6b0acd1394e6ec7b0606a5160dc64e6eed
- SSDEEP 6144:tx8BUXLDKiLvG7n8hn+PE99KznabfCDZFdwLRzcfNd0HPjigavwVf:tx8BU3KizG7/Er3fCD+L2f4W
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
nymaim
C2
-
208.67.104.97
-
85.31.46.167
Targets
-
- Target file.exe
- Size 364KB
- SHA256 c6a15b35a1fc2a1c4f26f903117e71ce5bc21bf0b2a5ebeadd12e7214c8417b8
- MD5 1a1e5d900fb4f664b16da2882956bca8
- SHA1 79cf4d46f1563e9fbd9ee031f566a5d74fd6c5dc
- SHA512 936d811220c6a2e81bb7e55a906c3392e4051aeb2b8eec9c0b9c542ac4eb44dd10eeab1ae2c9d98a126d5f3f32631e6b0acd1394e6ec7b0606a5160dc64e6eed
- SSDEEP 6144:tx8BUXLDKiLvG7n8hn+PE99KznabfCDZFdwLRzcfNd0HPjigavwVf:tx8BU3KizG7/Er3fCD+L2f4W
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself