nefilim | 2023-04-15_964925f0c7b06b2bdd3d481ccb4bb1b2_nefilim

General

Target
2023-04-15_964925f0c7b06b2bdd3d481ccb4bb1b2_nefilim
Size 80KB
Sample230416-embq4agh38
SHA256 38047530671ee9c9c49f8e0d82e1efd3567287a8c778f5b25cf06ea389d3e897
MD5 964925f0c7b06b2bdd3d481ccb4bb1b2
SHA1 f523259fd968e89359226b36cffd526e24c886e6
SHA512 cd4d5ac18305d97319d3ba6d1c40443f04c9157e3cfb6d4229c2566837eccc074204b98a5c1c6a5fd6247f73631bc9b2a822baf0733a12fe799bc59b82c713b2
SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshT3ED18nv04Zbqpb348Uq1krHT:liMWV3gDCk6EBwT/kJbvobuq1krj0
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nefilim

Nefilim ransomware executable 1 IoCs

File contains patterns typical of Nefilim samples.

resource	yara_rule
sample	nefilim_ransomware

SHA256 38047530671ee9c9c49f8e0d82e1efd3567287a8c778f5b25cf06ea389d3e897
MD5 964925f0c7b06b2bdd3d481ccb4bb1b2
SHA1 f523259fd968e89359226b36cffd526e24c886e6
SHA512 cd4d5ac18305d97319d3ba6d1c40443f04c9157e3cfb6d4229c2566837eccc074204b98a5c1c6a5fd6247f73631bc9b2a822baf0733a12fe799bc59b82c713b2
SSDEEP 768:lXStkFWTBhyugDC60CPJkEBx9w7mSDh3vkkjvshT3ED18nv04Zbqpb348Uq1krHT:liMWV3gDCk6EBwT/kJbvobuq1krj0
MD5 SHA1 SHA512 SSDEEP

windows x86

Nefilim ransomware executable

File contains patterns typical of Nefilim samples.

Minor OS version

Major OS version

Entry point

16196

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths