nefilim | fdaefa45c8679a161c6590b8f5bb735c12c9768172f81c930bb68c93a53002f7

General

Target
fdaefa45c8679a161c6590b8f5bb735c12c9768172f81c930bb68c93a53002f7
Size 58KB
Sample220131-3tn7rseca4
SHA256 fdaefa45c8679a161c6590b8f5bb735c12c9768172f81c930bb68c93a53002f7
MD5 6196c083282e7fe87d8039336e707e73
SHA1 eea8b6f959c6dd33609ff1552521cbe9dc169872
SHA512 2c7c653597d89e6c4f7041cfc6a9805f5aa9737ec2978b2231880480fd6f875e1726c3cefa0f3149d5b409a56caf8dd8bd1bc5daee62dab00da1fbcfeabddbbc
SSDEEP 768:5XStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvsh2ED18nv04Z46WuT:5iMWV3gDCk6EBwT/kJ6v1l
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nefilim

Nefilim Ransomware Executable 1 IoCs

File contains patterns typical of Nefilim samples.

resource	yara_rule
sample	nefilim_ransomware

SHA256 fdaefa45c8679a161c6590b8f5bb735c12c9768172f81c930bb68c93a53002f7
MD5 6196c083282e7fe87d8039336e707e73
SHA1 eea8b6f959c6dd33609ff1552521cbe9dc169872
SHA512 2c7c653597d89e6c4f7041cfc6a9805f5aa9737ec2978b2231880480fd6f875e1726c3cefa0f3149d5b409a56caf8dd8bd1bc5daee62dab00da1fbcfeabddbbc
SSDEEP 768:5XStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvsh2ED18nv04Z46WuT:5iMWV3gDCk6EBwT/kJ6v1l
MD5 SHA1 SHA512 SSDEEP

windows x86

Nefilim Ransomware Executable

File contains patterns typical of Nefilim samples.

Minor OS version

Major OS version

Entry point

16196

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths