General
-
Target
23b61ce11f2a64fe00b92584657f884bd7a7b39b1160d9e006bfec83cec1921e
-
Size
404KB
-
Sample
220612-azj6safacn
-
MD5
faba065344e5f585a8e7acfce2ffff5f
-
SHA1
bdbbc7f1ec213771a593dfc8f273e2c0b28a46af
-
SHA256
23b61ce11f2a64fe00b92584657f884bd7a7b39b1160d9e006bfec83cec1921e
-
SHA512
ea128b2e682085bf41fc5b322f89ea4d8c1f6090bdf723d688818f91e3e6395a05368c1029ca7c647d90e4bce118ddea9f19fd4b73938636862d2047c664986e
Static task
static1
Behavioral task
behavioral1
Sample
23b61ce11f2a64fe00b92584657f884bd7a7b39b1160d9e006bfec83cec1921e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
23b61ce11f2a64fe00b92584657f884bd7a7b39b1160d9e006bfec83cec1921e.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
23b61ce11f2a64fe00b92584657f884bd7a7b39b1160d9e006bfec83cec1921e
-
Size
404KB
-
MD5
faba065344e5f585a8e7acfce2ffff5f
-
SHA1
bdbbc7f1ec213771a593dfc8f273e2c0b28a46af
-
SHA256
23b61ce11f2a64fe00b92584657f884bd7a7b39b1160d9e006bfec83cec1921e
-
SHA512
ea128b2e682085bf41fc5b322f89ea4d8c1f6090bdf723d688818f91e3e6395a05368c1029ca7c647d90e4bce118ddea9f19fd4b73938636862d2047c664986e
Score10/10-
Dharma
Dharma is a ransomware that uses security software installation to hide malicious activities.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-