Win32/TrojanDownloader.Nymaim [Threat Name] go to Threat
Win32/TrojanDownloader.Nymaim.AB [Threat Variant Name]
| Category | trojan |
| Size | 129016 B |
| Aliases | TrojanDownloader:Win32/Nymaim.B (Microsoft) |
| Win32:Fareit-JB (Avast) |
Short description
Win32/TrojanDownloader.Nymaim.AB is a trojan which tries to download other malware from the Internet.
Installation
The trojan does not create any copies of itself.
Other information
The trojan may create the following files:
- %windows%\%variable%
A string with variable content is used instead of %variable% .
The trojan contains a list of (18) URLs.
It tries to download a file from the addresses. The HTTP protocol is used.
The downloaded files contain encrypted executables.
The file is stored in the following location:
- %temp%\%variable%.tmp
The file is then executed.
A string with variable content is used instead of %variable% .
The trojan then removes itself from the computer.