General
-
Target
59c95c7751be4ce975ff7dcfab6b6007ef5b864bde078d2012cddf449f50d07d
-
Size
573KB
-
Sample
220427-wjyvwsfga2
-
MD5
f71b390ae5a256fdf897eed00a126ba3
-
SHA1
b480e3abb52608356f05043ab2a5e6e06e2bbfd8
-
SHA256
59c95c7751be4ce975ff7dcfab6b6007ef5b864bde078d2012cddf449f50d07d
-
SHA512
20bf8e06aa7e0b961d1391397b3981856e8a204224bdd67580f8b5939592cbf124f69180f56e1629ee84b048839671c8e3c6cdb4de95f0afe8d2c79eae69e33d
Behavioral task
behavioral1
Sample
59c95c7751be4ce975ff7dcfab6b6007ef5b864bde078d2012cddf449f50d07d.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
59c95c7751be4ce975ff7dcfab6b6007ef5b864bde078d2012cddf449f50d07d.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
59c95c7751be4ce975ff7dcfab6b6007ef5b864bde078d2012cddf449f50d07d
-
Size
573KB
-
MD5
f71b390ae5a256fdf897eed00a126ba3
-
SHA1
b480e3abb52608356f05043ab2a5e6e06e2bbfd8
-
SHA256
59c95c7751be4ce975ff7dcfab6b6007ef5b864bde078d2012cddf449f50d07d
-
SHA512
20bf8e06aa7e0b961d1391397b3981856e8a204224bdd67580f8b5939592cbf124f69180f56e1629ee84b048839671c8e3c6cdb4de95f0afe8d2c79eae69e33d
Score10/10-
Dharma
Dharma is a ransomware that uses security software installation to hide malicious activities.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-