nefilim | 7d7c44f9c577c0af913d905b51797f17399d650de0331885abc8828c2696d37f

General

Target
7d7c44f9c577c0af913d905b51797f17399d650de0331885abc8828c2696d37f
Size 72KB
Sample220131-3t5vhsdfgm
SHA256 7d7c44f9c577c0af913d905b51797f17399d650de0331885abc8828c2696d37f
MD5 b7d38d7cb31b61b7baadb5c9b526ba15
SHA1 92e2568ae3c8c3198ea2dd656821d6ba473835df
SHA512 b3664b33a224148bae9e395164ad3e1668bacceb0c69a6299d05ec49bcef4998528d1b131e6a5fdcdd286067891a52e83cbdf8e7ee33094799fca0da4760dad8
SSDEEP 768:CXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshZ4ED18nv04ZPqpb348UqFk:CiMWV3gDCk6EBwT/kJZIvkbuqFk
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nefilim

Nefilim Ransomware Executable 1 IoCs

File contains patterns typical of Nefilim samples.

resource	yara_rule
sample	nefilim_ransomware

SHA256 7d7c44f9c577c0af913d905b51797f17399d650de0331885abc8828c2696d37f
MD5 b7d38d7cb31b61b7baadb5c9b526ba15
SHA1 92e2568ae3c8c3198ea2dd656821d6ba473835df
SHA512 b3664b33a224148bae9e395164ad3e1668bacceb0c69a6299d05ec49bcef4998528d1b131e6a5fdcdd286067891a52e83cbdf8e7ee33094799fca0da4760dad8
SSDEEP 768:CXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshZ4ED18nv04ZPqpb348UqFk:CiMWV3gDCk6EBwT/kJZIvkbuqFk
MD5 SHA1 SHA512 SSDEEP

windows x86

Nefilim Ransomware Executable

File contains patterns typical of Nefilim samples.

Minor OS version

Major OS version

Entry point

16196

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths