Static task
static1
Behavioral task
behavioral1
Sample
b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe
Resource
win10v20210408
General
-
Target
b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample
-
Size
17KB
-
MD5
3beb3d466bcc0977ec2dd66d72ab6bb3
-
SHA1
e94089137a41fd95c790f88cc9b57c2b4d5625ba
-
SHA256
b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17
-
SHA512
2d6fc985f4292f1945dc8caaf73286815d3ef834be0f6b07a19b0f9c0faa9b8c2022ef2fddc8925dbfee9a4bdcce553cb996c44abe8b7baf3a16c8c6d2c28ef7
Malware Config
Signatures
-
Nefilim Ransomware (Signed) 1 IoCs
Digital signature of sample matches known Nefilim ransomware.
Processes:
resource yara_rule sample nefilim_ransomware_signed -
Nefilim Ransomware Executable 1 IoCs
File contains patterns typical of Nefilim samples.
Processes:
resource yara_rule sample nefilim_ransomware -
Nefilim family
Files
-
b227fa0485e34511627a8a4a7d3f1abb6231517be62d022916273b7a51b80a17.sample.exe windows x86