2024-06-11_49cbff60bcd2adfcfb34075e990977a4_crysis_dharma

General

Target
2024-06-11_49cbff60bcd2adfcfb34075e990977a4_crysis_dharma
Size 92KB
Sample240611-x7dejaydje
SHA256 cdd4aa0e9f016553d7021d2ab2a9a79ba2d4e5be7949d06390072271fddb77c0
MD5 49cbff60bcd2adfcfb34075e990977a4
SHA1 a93ce2125592e26552a9fc2ff40a874b5d468523
SHA512 9246fe7c38b43fae903c109bde651b44e8e14d0e487c59a7f7b3609a4c2e8f5dc582685116e33400892c241a9e34b1efeed9b74134d4f9e90339ad7da7d1dc05
SSDEEP 1536:GBwl+KXpsqN5vlwWYyhZ9S4AyFDbjzOx/8di/Laww8NOsC7okPpp3tb1:ww+asqN5aW/hSkpjzOx/zzaH8UsC9PpB
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detects win.dharma. 1 IoCs

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-11_49cbff60bcd2adfcfb34075e990977a4_crysis_dharma

SHA256 cdd4aa0e9f016553d7021d2ab2a9a79ba2d4e5be7949d06390072271fddb77c0
MD5 49cbff60bcd2adfcfb34075e990977a4
SHA1 a93ce2125592e26552a9fc2ff40a874b5d468523
SHA512 9246fe7c38b43fae903c109bde651b44e8e14d0e487c59a7f7b3609a4c2e8f5dc582685116e33400892c241a9e34b1efeed9b74134d4f9e90339ad7da7d1dc05
SSDEEP 1536:GBwl+KXpsqN5vlwWYyhZ9S4AyFDbjzOx/8di/Laww8NOsC7okPpp3tb1:ww+asqN5aW/hSkpjzOx/zzaH8UsC9PpB
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

43472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths