General
-
Target
4b6c50231a2189ab1a6c3e37d3560c3e_crysis_JC.exe
-
Size
92KB
-
Sample
230820-k358jaea87
-
MD5
4b6c50231a2189ab1a6c3e37d3560c3e
-
SHA1
51eb90e8a00bf4d0de37b4ede28b0923c0c506de
-
SHA256
cdca8dda55c8fe2ff394fe8c848f440ed013d33234729032d56fdfa6b323c08a
-
SHA512
1a0e5169645d805c7257793e99bc3746ee5256c1cb3c2a0263711720e37f68cadff77a5435b3275d24b802e51c72c6873325e0454c33122f2166b13dc949cce6
-
SSDEEP
1536:mBwl+KXpsqN5vlwWYyhY9S4AAM0j/RHbyCNq/Z5O6TK:Qw+asqN5aW/hLa7jJ+V/Z5rW
Static task
static1
Behavioral task
behavioral1
Sample
4b6c50231a2189ab1a6c3e37d3560c3e_crysis_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4b6c50231a2189ab1a6c3e37d3560c3e_crysis_JC.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
4b6c50231a2189ab1a6c3e37d3560c3e_crysis_JC.exe
-
Size
92KB
-
MD5
4b6c50231a2189ab1a6c3e37d3560c3e
-
SHA1
51eb90e8a00bf4d0de37b4ede28b0923c0c506de
-
SHA256
cdca8dda55c8fe2ff394fe8c848f440ed013d33234729032d56fdfa6b323c08a
-
SHA512
1a0e5169645d805c7257793e99bc3746ee5256c1cb3c2a0263711720e37f68cadff77a5435b3275d24b802e51c72c6873325e0454c33122f2166b13dc949cce6
-
SSDEEP
1536:mBwl+KXpsqN5vlwWYyhY9S4AAM0j/RHbyCNq/Z5O6TK:Qw+asqN5aW/hLa7jJ+V/Z5rW
Score10/10-
Dharma
Dharma is a ransomware that uses security software installation to hide malicious activities.
-
Renames multiple (310) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Renames multiple (481) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-