2024-06-11_c6e7557c9410d9e567f9c39843f7e393_crysis_dharma

General

Target

2024-06-11_c6e7557c9410d9e567f9c39843f7e393_crysis_dharma
Size

92KB
MD5

c6e7557c9410d9e567f9c39843f7e393
SHA1

c26d408c07db466b4c8883b8eb3446c98f19f8c1
SHA256

b7fdcfadbe335a256dbe88321044768bf4d8c1da7afc67ff7ace127310289dde
SHA512

8d29d84227b800e45649c7d344e4b5f5b80a3d2f0a59e963c4e26dc85f9b0518e2e78383a87d0a8bbc1c0c78e6ab9de5ea8002936a38d6e33e7b82a3da737b51
SSDEEP

1536:GBwl+KXpsqN5vlwWYyhZ9S4ACURxvunaBCgUvZ2Yqwt10U:ww+asqN5aW/hSsYxvjTGYyH

Score

10^/10

Detects win.dharma. 1 IoCs

Processes:

resource yara_rule

sample win_dharma_auto

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

Processes:

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-11_c6e7557c9410d9e567f9c39843f7e393_crysis_dharma