Nymaim

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Nymaim
Alias
Group	Police lock
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target
Origin
Distribution vector	Blackhole
UserAgent
CCProtocol
Activity	2012-12 /
Status
Language
Programming language
Operation/Working group

Introduction

Does not comply to Proxy settings of the computer.

Server side as a Computer ID aware memory (same design with always be sent to same computer)
Has be pushed in Blackhole but is now a task from a Pony pushed by the "q.php" Blackhole (cf Darkleech campaign)

md5

  soon 

httpget

Associated images

• 
  Nymaim AT 2013-04
• 
  Nymaim CA 2013-04
• 
  Nymaim DE 2013-04
• 
  Nymaim ES 2013-04
• 
  Nymaim FR 2013-04
• 
  Nymaim NL 2013-04
• 
  Nymaim UK 2013-04
• 
  Nymaim US 2013-04

Publications

	Author	Editor	Year
Nymaim - obfuscation chronicles	Jean-Ian Boutin	ESET	2013