nefilim | 5543148694700032[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
5543148694700032.zip
Size 11KB
Sample210923-qb2c6aechr
SHA256 d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5
MD5 bcbc99c763a9bee40e762bf1f8c7dfbe
SHA1 59f46c0039851f8bd29cf702a7a2092dc920dc40
SHA512 c21f30f1fa092f847d9806f2b2cb6ea2d9cbc11287738970006a90dd7977700334e80a0241ace7c5436041dd672ecedcfa6abfd87e42b400a54bff38535ade17
MD5 SHA1 SHA512

Score

10^/10

nefilim

Malware Config

Signatures

Nefilim Ransomware Executable 1 IoCs

File contains patterns typical of Nefilim samples.

resource	yara_rule
static1/unpack001/8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b	nefilim_ransomware

Nefilim family
nefilim

File Explorer

5543148694700032.zip

.zip 11KB
8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b

.exe 18KB

5543148694700032.zip

SHA256 d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5
MD5 bcbc99c763a9bee40e762bf1f8c7dfbe
SHA1 59f46c0039851f8bd29cf702a7a2092dc920dc40
SHA512 c21f30f1fa092f847d9806f2b2cb6ea2d9cbc11287738970006a90dd7977700334e80a0241ace7c5436041dd672ecedcfa6abfd87e42b400a54bff38535ade17
MD5 SHA1 SHA512

Password

infected