General
-
Target
498df06b0a8d8715e818a582c919bcb5964e5f0eef64bd21f32e52b4ec4861ab
-
Size
92KB
-
Sample
220712-ttwr6sceh2
-
MD5
b57980b72eb6497212f86353447d2e5f
-
SHA1
27b49e51dfde8186287bc936e1197423951fa9a6
-
SHA256
498df06b0a8d8715e818a582c919bcb5964e5f0eef64bd21f32e52b4ec4861ab
-
SHA512
c9e19dc2a5845176954599e0c0b9b9c06c941f79d65f86ead0120f0eb6a3fe2976502127f31f5c35fc57304939665f57f24c248eb7418b64694587930fabf4cc
Static task
static1
Behavioral task
behavioral1
Sample
498df06b0a8d8715e818a582c919bcb5964e5f0eef64bd21f32e52b4ec4861ab.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
498df06b0a8d8715e818a582c919bcb5964e5f0eef64bd21f32e52b4ec4861ab.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta
briannaax1zbharris@aol.com
laurenlyfxecarter@aol.com
Targets
-
-
Target
498df06b0a8d8715e818a582c919bcb5964e5f0eef64bd21f32e52b4ec4861ab
-
Size
92KB
-
MD5
b57980b72eb6497212f86353447d2e5f
-
SHA1
27b49e51dfde8186287bc936e1197423951fa9a6
-
SHA256
498df06b0a8d8715e818a582c919bcb5964e5f0eef64bd21f32e52b4ec4861ab
-
SHA512
c9e19dc2a5845176954599e0c0b9b9c06c941f79d65f86ead0120f0eb6a3fe2976502127f31f5c35fc57304939665f57f24c248eb7418b64694587930fabf4cc
Score10/10-
Dharma
Dharma is a ransomware that uses security software installation to hide malicious activities.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-