Overview

overview

10

Static

static

10

7de8ca88e2...77.exe

windows7_x64

5

7de8ca88e2...77.exe

windows10-2004_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
  • Size 25KB
  • Sample220131-3t3p6adfgl
  • SHA256 7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
nefilim

Malware Config

Signatures

  • Nefilim Ransomware (Signed) 1 IoCs

    Digital signature of sample matches known Nefilim ransomware.

  • Nefilim Ransomware Executable 1 IoCs

    File contains patterns typical of Nefilim samples.

  • Nefilim family
    nefilim

File Explorer

  • 7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
    .exe 25KB

7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377

  • IMPHASH 35f7171c074e35f1274e48a67e3185dc
  • SHA256 7de8ca88e240fb905fc2e8fd5db6c5af82d8e21556f0ae36d055f623128c3377
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Nefilim Ransomware (Signed)

    Digital signature of sample matches known Nefilim ransomware.

  • Nefilim Ransomware Executable

    File contains patterns typical of Nefilim samples.

PE Signature issue

Digest
2a:7a:65:1a:aa:6b:e8:90:22:53:bb:48:1a:d3:36:0b:e2:4d:f0:ff
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
10456
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths