nefilim | 2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim

General

Target
2023-04-15_3f9e1c7638b6d4710eccb97b40aabe08_nefilim
Size 70KB
Sample230416-embfbsad8v
SHA256 7dfcf790000d34b4c85d6e36e3564bdd2b8cc9ff326309a0726d0786293d0073
MD5 3f9e1c7638b6d4710eccb97b40aabe08
SHA1 f262ee7ffe0ff40b8c6ae07c12b539f160f41e85
SHA512 2d15a519ef24d88a4527e07cc0f39230fd3f737980605f3a4360f559ea85bc84cb3dac6574a1e627743b1685616df315b43cde9e726bcb047172610715a47564
SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshT3ED18nv04ZJqpb348Uq1krHE:liMWV3gDCk6EBwT/kJbvKbuq1krj0x
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nefilim

Nefilim ransomware executable 1 IoCs

File contains patterns typical of Nefilim samples.

resource	yara_rule
sample	nefilim_ransomware

SHA256 7dfcf790000d34b4c85d6e36e3564bdd2b8cc9ff326309a0726d0786293d0073
MD5 3f9e1c7638b6d4710eccb97b40aabe08
SHA1 f262ee7ffe0ff40b8c6ae07c12b539f160f41e85
SHA512 2d15a519ef24d88a4527e07cc0f39230fd3f737980605f3a4360f559ea85bc84cb3dac6574a1e627743b1685616df315b43cde9e726bcb047172610715a47564
SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshT3ED18nv04ZJqpb348Uq1krHE:liMWV3gDCk6EBwT/kJbvKbuq1krj0x
MD5 SHA1 SHA512 SSDEEP

windows x86

Nefilim ransomware executable

File contains patterns typical of Nefilim samples.

Minor OS version

Major OS version

Entry point

16196

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths