nefilim | 0b3add1edb40d5164ee57e84f7462ee4ff3ef6da65b14ebb6b50b2222d45bc1c

General

Target
0b3add1edb40d5164ee57e84f7462ee4ff3ef6da65b14ebb6b50b2222d45bc1c
Size 70KB
Sample220131-3v5wxaecb4
SHA256 0b3add1edb40d5164ee57e84f7462ee4ff3ef6da65b14ebb6b50b2222d45bc1c
MD5 a95e39d38e764abb019d4c9b08dbee67
SHA1 e5e612f680fd17fb5cd4f2efc7ebd026ad169406
SHA512 2f19f1471c4ad75ce109af9d5305232a33d5ac7423dcfffddbeb401e5cabb6f62586e27cec6e0e8770eb2822c6fc2275592fa25f3193198bfa26afa5f82a6e81
SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjv4hT3ED18nv04ZPqpb348Uq1krH2:liMWV3gDCk6EBwT/kLbvkbuq1kfj0D
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nefilim

Nefilim Ransomware Executable 1 IoCs

File contains patterns typical of Nefilim samples.

resource	yara_rule
sample	nefilim_ransomware

SHA256 0b3add1edb40d5164ee57e84f7462ee4ff3ef6da65b14ebb6b50b2222d45bc1c
MD5 a95e39d38e764abb019d4c9b08dbee67
SHA1 e5e612f680fd17fb5cd4f2efc7ebd026ad169406
SHA512 2f19f1471c4ad75ce109af9d5305232a33d5ac7423dcfffddbeb401e5cabb6f62586e27cec6e0e8770eb2822c6fc2275592fa25f3193198bfa26afa5f82a6e81
SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjv4hT3ED18nv04ZPqpb348Uq1krH2:liMWV3gDCk6EBwT/kLbvkbuq1kfj0D
MD5 SHA1 SHA512 SSDEEP

windows x86

Nefilim Ransomware Executable

File contains patterns typical of Nefilim samples.

Minor OS version

Major OS version

Entry point

16196

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths