Nymaim revisited
Tags
country: Germany Poland
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Vnc - T1021.005
Show in Graph
Common Information
Type Value
UUID ba8b3457-4234-4706-9b68-0df8c8c13bd5
Fingerprint a6153872644596dd
Analysis status IN_PROGRESS
Considered CTI value 0
Text language
Published Jan. 30, 2017, midnight
Added to db Aug. 31, 2024, 1:53 a.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline Social media
Title Nymaim revisited
Detected Hints/Tags/Attributes 64/3/16
Source URLs
Redirection Url
Details Source https://www.cert.pl/en/news/single/nymaim-revisited/
Details Source https://cert.pl/en/posts/2017/01/nymaim-revisited/
URL Provider
Details Provider Source level domain
Details cert.pl cert.pl
Details cert.pl www.cert.pl
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 81 ✔ CERT Polska https://cert.pl/en/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 369 
microsoft.com
Details Domain 707 
google.com
Details Domain 1 
ejdqzkd.com
Details Domain 1 
sjzmvclevg.com
Details Domain 4128 
github.com
Details File 2 
dga_release.py
Details Github username 3 
vrtadmin
Details md5 1 
9d6cb537d65240bbe417815243e56461
Details md5 1 
a395c8475ad51459aeaf01166e333179
Details md5 1 
744d184bf8ea92270f77c6b2eea28896
Details md5 1 
6b31500ddd7a55a8882ebac03d731a3e
Details md5 1 
cb3d058a78196e5c80a8ec83a73c2a79
Details md5 1 
8a9ae9f4c96c2409137cc361fc5740e9
Details IPv4 295 
8.8.8.8
Details IPv4 63 
8.8.4.4
Details Url 1 
https://github.com/vrtadmin/goznym/blob/master/dga_release.py