nefilim | 3bac058dbea51f52ce154fed0325fd835f35c1cd521462ce048b41c9b099e1e5 | Triage

Sharing

General

Target

3bac058dbea51f52ce154fed0325fd835f35c1cd521462ce048b41c9b099e1e5
Size

14KB
Sample

220131-3vwcgadfhl
MD5

dc88265c361d73540a31c19583271fb0
SHA1

e99460b4e8759909d3bd4e385d7e3f9b67aa1242
SHA256

3bac058dbea51f52ce154fed0325fd835f35c1cd521462ce048b41c9b099e1e5
SHA512

df253a3eff3c6be79d9717a0e13f1df7cc88c45bd26e5932950144bc18d78aa65986f8489bf223cf54b2a80b11f203059dda5aaa8fbe48a1a41fdfa38bcca6a4

Score

10^/10

nefilim persistence ransomware

Malware Config

Targets

- Target
  
  3bac058dbea51f52ce154fed0325fd835f35c1cd521462ce048b41c9b099e1e5
- Size
  
  14KB
- MD5
  
  dc88265c361d73540a31c19583271fb0
- SHA1
  
  e99460b4e8759909d3bd4e385d7e3f9b67aa1242
- SHA256
  
  3bac058dbea51f52ce154fed0325fd835f35c1cd521462ce048b41c9b099e1e5
- SHA512
  
  df253a3eff3c6be79d9717a0e13f1df7cc88c45bd26e5932950144bc18d78aa65986f8489bf223cf54b2a80b11f203059dda5aaa8fbe48a1a41fdfa38bcca6a4
Score

8^/10

ransomware persistence
- Sets service image path in registry
  persistence
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2

persistenceransomware