nefilim | d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5 | Triage

Sharing

General

Target

d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5
Size

11KB
Sample

240419-wzerysbh33
MD5

bcbc99c763a9bee40e762bf1f8c7dfbe
SHA1

59f46c0039851f8bd29cf702a7a2092dc920dc40
SHA256

d234a973c777feee70d3fe7a614c71365b2a28d48bffb89f453fd96cbfd54ef5
SHA512

c21f30f1fa092f847d9806f2b2cb6ea2d9cbc11287738970006a90dd7977700334e80a0241ace7c5436041dd672ecedcfa6abfd87e42b400a54bff38535ade17
SSDEEP

192:s6BVQVKGJ6e0hebUdBHlftMBvTF/8xo6zatMHqrZgk0wGTLtkFOoKmBc8e8E:nBe5J63ebUvHwBvl8xRzaWHwgkJGTLv1

Score

10^/10

nefilim ransomware

Malware Config

Targets

- Target
  
  8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b
- Size
  
  18KB
- MD5
  
  ddc50d4ae0674d854a845b3eb32508c3
- SHA1
  
  c61f2cdb0faf31120e33e023b7b923b01bc97fbf
- SHA256
  
  8be1c54a1a4d07c84b7454e789a26f04a30ca09933b41475423167e232abea2b
- SHA512
  
  06726d49f931902c7f22d7db1e61ac7dfd28a8b0323217a7e1e7c480a3f03a2b6b3abe76cbf7962a659ad928e604d1bd66bae3c9418f96088e7f265acdee322d
- SSDEEP
  
  384:QXMTdRam+CzPnvvLjjXbee9hNBxNIUfNsJwaYmfWmoJMnCPuLvdm5+nIQVC2gVj:QXzahsDem9GQmOViULzwfGDxhv7f
Score

5^/10

ransomware
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2