2024-06-12_2ce48f5a9883f06c981a3151ac9c0bb3_crysis_dharma

General

Target

2024-06-12_2ce48f5a9883f06c981a3151ac9c0bb3_crysis_dharma
Size

92KB
MD5

2ce48f5a9883f06c981a3151ac9c0bb3
SHA1

bbf9978bfc2e22e0aa31e9592e6210b72c7821ea
SHA256

b7f3e9aa802967b204893d8fb7150b4e12830e25e483c69059dcb5fec85ee6d2
SHA512

e9c1e235c81e509e908686d31123fc7a9caf8a50a8e1faedc825d30d14c3e4be70ae39c9f26542d99961ba3f6f3991c024ec19ecc6a29f238ec00dab128fa6da
SSDEEP

1536:GBwl+KXpsqN5vlwWYyhZ9S4AhXcOETSbSox1OYwN1qg5Hxr7Al:ww+asqN5aW/hSbMlMSox1ODNcaHx

Score

10^/10

Detects win.dharma. 1 IoCs

Processes:

resource yara_rule

sample win_dharma_auto

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

Processes:

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-12_2ce48f5a9883f06c981a3151ac9c0bb3_crysis_dharma