2024-06-11_f0ab6743349f3ca9efc882a705ae09e8_crysis_dharma

General

Target

2024-06-11_f0ab6743349f3ca9efc882a705ae09e8_crysis_dharma
Size

92KB
MD5

f0ab6743349f3ca9efc882a705ae09e8
SHA1

826e22f83d4ca23288dcf37994446c5a090edaf6
SHA256

0d341fcd44494bfa646ca60d3a88d7f8b42f7a7702c36fc7901efe7dd0535da8
SHA512

1ad9c28afbe776699c1dc83041f5a2084ccee197268eb073d57effc123ba2c1ec51e21da829c41a6a9b71034101e1c23df072766c16c72dcccd40755720d57d2
SSDEEP

1536:GBwl+KXpsqN5vlwWYyhZ9S4Auj5+JQHukINIrL3UxHcLL0zbTAw7Nh:ww+asqN5aW/hSI/H5INInUxH4IzP1J

Score

10^/10

Detects win.dharma. 1 IoCs

Processes:

resource yara_rule

sample win_dharma_auto

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

Processes:

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-11_f0ab6743349f3ca9efc882a705ae09e8_crysis_dharma