2024-06-11_e3840d3ae2255fe5a8414f0da16f877c_crysis_dharma

General

Target
2024-06-11_e3840d3ae2255fe5a8414f0da16f877c_crysis_dharma
Size 92KB
Sample240611-qq36asyfmn
SHA256 9959ff057928c12048a361533d4c37449336cc6be2396d81e1f9c0976f969075
MD5 e3840d3ae2255fe5a8414f0da16f877c
SHA1 2fa8674341a726bccbc990346f142577d915f55b
SHA512 633b91b8f49b2901c8bbfb064f92952c7b81f1c2882e6d00f374eabe65aa089800ce347c339f965d38cc1ad845b210a6f3e5efa0d54bc56b00c0c43b9a420b52
SSDEEP 1536:GBwl+KXpsqN5vlwWYyhZ9S4AMx1QvXxrCA4/6yqdZ7wWEf:ww+asqN5aW/hS8kbyqdREf
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detects win.dharma. 1 IoCs

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-11_e3840d3ae2255fe5a8414f0da16f877c_crysis_dharma

SHA256 9959ff057928c12048a361533d4c37449336cc6be2396d81e1f9c0976f969075
MD5 e3840d3ae2255fe5a8414f0da16f877c
SHA1 2fa8674341a726bccbc990346f142577d915f55b
SHA512 633b91b8f49b2901c8bbfb064f92952c7b81f1c2882e6d00f374eabe65aa089800ce347c339f965d38cc1ad845b210a6f3e5efa0d54bc56b00c0c43b9a420b52
SSDEEP 1536:GBwl+KXpsqN5vlwWYyhZ9S4AMx1QvXxrCA4/6yqdZ7wWEf:ww+asqN5aW/hS8kbyqdREf
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

43472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths