Nymaim

From Botnets.fr
Jump to navigation Jump to search

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

Nymaim
Alias
Group Police lock
Parent
Sibling
Family
Relations Variants:

Sibling of:
Parent of:
Distribution of:
Campaigns:

Target
Origin
Distribution vector Blackhole
UserAgent
CCProtocol
Activity 2012-12 /
Status
Language
Programming language
Operation/Working group

Introduction

Does not comply to Proxy settings of the computer.

Server side as a Computer ID aware memory (same design with always be sent to same computer)
Has be pushed in Blackhole but is now a task from a Pony pushed by the "q.php" Blackhole (cf Darkleech campaign)

md5

  soon 

httpget

Features

Associated images

Checksums / AV databases

Publications

 AuthorEditorYear
Nymaim - obfuscation chroniclesJean-Ian BoutinESET2013