nefilim | 7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377 | Triage

Sharing

General

Target

7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
Size

25KB
Sample

220131-3t3p6adfgl
MD5

0790a7e0a842e1de70de194054fa11b3
SHA1

4595cdd47b63a4ae256ed22590311f388bc7a2d8
SHA256

7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
SHA512

0fe5bbe2a6681dde660b5ca2ebee3ae969efa0046641c991de805a83810b21176ae6cd05da1316a538929599e52db00cc4aaa4c80b11b1922429facb25d9ced9

Score

10^/10

nefilim persistence ransomware

Malware Config

Targets

- Target
  
  7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
- Size
  
  25KB
- MD5
  
  0790a7e0a842e1de70de194054fa11b3
- SHA1
  
  4595cdd47b63a4ae256ed22590311f388bc7a2d8
- SHA256
  
  7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
- SHA512
  
  0fe5bbe2a6681dde660b5ca2ebee3ae969efa0046641c991de805a83810b21176ae6cd05da1316a538929599e52db00cc4aaa4c80b11b1922429facb25d9ced9
Score

8^/10

ransomware persistence
- Sets service image path in registry
  persistence
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2

persistenceransomware