Nymaim

From Botnets.fr
Revision as of 15:44, 8 August 2015 by Eric.freyssinet (talk | contribs) (Text replacement - "=Unknown" to "=")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Nymaim
Alias
Group Police lock
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector Blackhole
UserAgent
CCProtocol
Activity 2012-12 /
Status
Language
Programming language
Operation/Working group

Introduction

Does not comply to Proxy settings of the computer.

Server side as a Computer ID aware memory (same design with always be sent to same computer)
Has be pushed in Blackhole but is now a task from a Pony pushed by the "q.php" Blackhole (cf Darkleech campaign)

md5

  soon 

httpget

Features

Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
Nymaim - obfuscation chroniclesJean-Ian BoutinESET2013