General
-
Target
99983db6d986615dc063bb4d1a2d718ee75924e4febe9778fb0f84d8617f22b1
-
Size
92KB
-
Sample
220306-gjy4bsabc2
-
MD5
fa24e8b89babb10674a2aef8ca34e24f
-
SHA1
cad18a09d19ea9482d3d379490742cb9bfa01508
-
SHA256
99983db6d986615dc063bb4d1a2d718ee75924e4febe9778fb0f84d8617f22b1
-
SHA512
7a2477c0204d705c7a31f9e5fa121dd33db4e5fd3722da8ef2be93fb1de8e850f54a1c28b272d06782892b85db9724d43cff50a1d6ace8980d82f4919cbd3566
Static task
static1
Behavioral task
behavioral1
Sample
99983db6d986615dc063bb4d1a2d718ee75924e4febe9778fb0f84d8617f22b1.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
99983db6d986615dc063bb4d1a2d718ee75924e4febe9778fb0f84d8617f22b1.exe
Resource
win10v2004-en-20220112
Malware Config
Extracted
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta
Targets
-
-
Target
99983db6d986615dc063bb4d1a2d718ee75924e4febe9778fb0f84d8617f22b1
-
Size
92KB
-
MD5
fa24e8b89babb10674a2aef8ca34e24f
-
SHA1
cad18a09d19ea9482d3d379490742cb9bfa01508
-
SHA256
99983db6d986615dc063bb4d1a2d718ee75924e4febe9778fb0f84d8617f22b1
-
SHA512
7a2477c0204d705c7a31f9e5fa121dd33db4e5fd3722da8ef2be93fb1de8e850f54a1c28b272d06782892b85db9724d43cff50a1d6ace8980d82f4919cbd3566
Score10/10-
Dharma
Dharma is a ransomware that uses security software installation to hide malicious activities.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-