Static task
static1
Behavioral task
behavioral1
Sample
8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe
Resource
win7v20210408
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe
Resource
win10-en-20210920
windows10_x64
0 signatures
0 seconds
General
-
Target
5543148694700032.zip
-
Size
11KB
-
MD5
bcbc99c763a9bee40e762bf1f8c7dfbe
-
SHA1
59f46c0039851f8bd29cf702a7a2092dc920dc40
-
SHA256
d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5
-
SHA512
c21f30f1fa092f847d9806f2b2cb6ea2d9cbc11287738970006a90dd7977700334e80a0241ace7c5436041dd672ecedcfa6abfd87e42b400a54bff38535ade17
Score
10/10
Malware Config
Signatures
-
Nefilim Ransomware Executable 1 IoCs
File contains patterns typical of Nefilim samples.
Processes:
resource yara_rule static1/unpack001/8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b nefilim_ransomware -
Nefilim family
Files
-
5543148694700032.zip.zip
Password: infected
-
8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b.exe windows x86