MALICIOUS — Nyb_Boot.ima

MALICIOUS — Nyb_Boot.ima is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100), attributed to the UNOFFICIAL family. 1 of 47 detection engines flagged it.

Identification

• SHA-256: d206be47455ceceac21225dee5a9c5605da7a90f0563a022a7299d0d2bff0c3b
• SHA-1: 6fcc08917d06555c4a2aa606b5affd618b2abfac
• MD5: 12539dc98e9359c90faf8b7f55d9bf1d
• ssdeep: 3072:zWZyWZyWZBnWDnWaP79z4+P79z4kq7qMh5:zWZyWZyWZBWDW6798e798kq7qi
• TLSH: T1453BAE79D652BCDEE1C538A10BF52F9E39D0B6863C792CA3D640399490110DB0F9E26B
• Submitted as: Nyb_Boot.ima
• File type: unknown · Size: 110592 bytes
• Verdict: malicious (86/100) · Family: UNOFFICIAL

Source: theZoo · first seen 2026-07-26T03:44:57.326Z · SHA-256 not source-verified

Detections (1 of 47 engines)

• ClamAV (daily): {HEX}bin.trojan.generic.stoned.110.UNOFFICIAL

Why this verdict

The malicious score of 86/100 is the fusion of 1 weighted signal:

• ClamAV (daily) flagged {HEX}bin.trojan.generic.stoned.110.UNOFFICIAL (rule {HEX}bin.trojan.generic.stoned.110.UNOFFICIAL) - engine signal, weight 0.90, confidence 0.95

File paths

• C:\DBLSPACE.BIN
• C:\DRVSPACE.BIN
• C:\DRVSPACE.INI
• A:\COUNTRY.SYS
• A:\MSDOS
• A:\DOS
• C:\COMMAND.COM)

More UNOFFICIAL samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report