Extracted

• • Target

    archive.exe

  • Size

    92KB

  • MD5

    6b873b618cc8ee379862d1709e862780

  • SHA1

    2b514deefde860afab8c0418bb40ccc54f03cd5e

  • SHA256

    880207fb1e6f801d59d06208b8e37271c877bea94821fbf2883c6d70558fe587

  • SHA512

    e6164b415cf2ae8e5d4f0ae14473bf66f61c22ff0992b7eed757362adef6707ca2c7f05a3a91e51971cff71223941c4101d8aae672d0daaa4f19d3117036d025

  Score

  10^/10

  ransomwarespywarepersistencedharma

  • Dharma

    Dharma is a ransomware that uses security software installation to hide malicious activities.

    ransomwaredharma

  • Deletes shadow copies

    Ransomware often targets backup files to inhibit system recovery.

    ransomware

  • Drops startup file

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run entry to start application

    persistence

  • Drops desktop.ini file(s)

  • Drops file in System32 directory

  • Modifies service

    persistence
  behavioral1behavioral2