2024-06-11_b1f4a96727ebc8159fc8553831d43352_crysis_dharma

General

Target

2024-06-11_b1f4a96727ebc8159fc8553831d43352_crysis_dharma
Size

92KB
MD5

b1f4a96727ebc8159fc8553831d43352
SHA1

83d21bc2771a4cf355697436b6f34df0f27cf361
SHA256

831e7f068e2f4809acaf9e49b9be7da2adcf4d7644b184dbc25e62e8cac17eb0
SHA512

87871b4a8c5e2f421cfc0476ffc7685cc391501a34e98c655abd17ff0f5e95987acd66c1f78f1aa4004a09ff6c62c5fa45e3772834ea8697fe264d1dd34f205e
SSDEEP

1536:GBwl+KXpsqN5vlwWYyhZ9S4AI018vUKEVi9fH8v0iQGxk4:ww+asqN5aW/hSR18gVue/

Score

10^/10

Detects win.dharma. 1 IoCs

Processes:

resource yara_rule

sample win_dharma_auto

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

Processes:

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-11_b1f4a96727ebc8159fc8553831d43352_crysis_dharma