Analysis
- max time kernel
91s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
16/04/2023, 04:02
Behavioral task
behavioral1
Sample
2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
- Target 2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim.exe
- Size 70KB
- Sample230416-embfbsad8v
- SHA256 7dfcf790000d34b4c85d6e36e3564bdd2b8cc9ff326309a0726d0786293d0073
- MD5 3f9e1c7638b6d4710eccb97b40aabe08
- SHA1 f262ee7ffe0ff40b8c6ae07c12b539f160f41e85
- SHA512 2d15a519ef24d88a4527e07cc0f39230fd3f737980605f3a4360f559ea85bc84cb3dac6574a1e627743b1685616df315b43cde9e726bcb047172610715a47564
- SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshT3ED18nv04ZJqpb348Uq1krHE:liMWV3gDCk6EBwT/kJbvKbuq1krj0x
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1728 2036 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim.exe"C:\Users\Admin\AppData\Local\Temp\2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim.exe"1⤵PID:2036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 2162⤵
- Program crash
PID:1728
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2036 -ip 20361⤵PID:3544