Category: Malware
Nymaim Malware: Deep Technical Dive – Adventures in Evasive Malware
Nymaim is mostly known worldwide as a downloader, although it seems they evolved from former versions, now having new functionalities to obtain data on the machine with no need to download a new payload. Some of the exported functionalities allow harvesting passwords and browsers data from the machine, hidden on the file system until communication occurs. Payloads downloaded from the C&C are not saved locally on the machine but instead are loaded dynamically to memory with a unique internal calling convention.
Read more “Nymaim Malware: Deep Technical Dive – Adventures in Evasive Malware”
Ursnif Malware: Deep Technical Dive
In this blog I explain some of the core methods an attack tool named Ursnif uses, as well as mention some, probably unintentional, pieces of code that were left behind in the production version of the malware.