Nymaim
Loader + ransomware drop
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:11:50.351Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:11:50.351Z · Confidence: high
Security Timeline
- discovered Nymaim first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Nymaim is an old loader/ransomware family with heavy polymorphism and intermittent activity. (attributes recorded from Researchers).
Definition
Nymaim is an old loader/ransomware family with heavy polymorphism and intermittent activity.
Overview
Nymaim is an old loader/ransomware family with heavy polymorphism and intermittent activity.
Behavior
- Polymorphic DLL
- downtime factors
First Seen
2013-01
Target
Loader + ransomware drop
Malware Intelligence
Family: Nymaim
Techniques: T1105, T1055
Targets: Loader + ransomware drop
Behavior:
- Polymorphic DLL
- downtime factors
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.