General
- Target 360dec1b6f744c855cb41e82317e4d8d8913b8abb2bbdb2abaa626ee44baf9cd
- Size 1.8MB
- Sample260812-pf2n2stwht
- SHA256 360dec1b6f744c855cb41e82317e4d8d8913b8abb2bbdb2abaa626ee44baf9cd
Score
10/10
Malware Config
Targets
-
- Target fb3f622cf5557364a0a3abacc3e9acf399b3631bf3630acb8132514c486751e7.exe
- Size 3.3MB
- SHA256 fb3f622cf5557364a0a3abacc3e9acf399b3631bf3630acb8132514c486751e7
Score10/10-
Family: Nefilim
Ransomware first seen in early 2020 which shares code with the Nemty family. Rewritten in Golang in July 2020.
-
Renames multiple (191) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops desktop.ini file(s)