2024-06-12_880fc048dbad8094158607f114333d9f_crysis_dharma

General

Target

2024-06-12_880fc048dbad8094158607f114333d9f_crysis_dharma
Size

92KB
MD5

880fc048dbad8094158607f114333d9f
SHA1

89013faf2bf788c148442bd52c4ba2cc89f33bd3
SHA256

c936e22e06aa4e0f3a243ebd1ae9c7e7b15b6d2996edf1f475d392ce37fe8dbd
SHA512

720ad4101d3eae615b115f8769af9c5a31662db1461a20a0e53c0d71efeb8c0f58cb9412a5b97da15b518d8207947cbad2c693d3dcecca691a915b33668d3195
SSDEEP

1536:GBwl+KXpsqN5vlwWYyhZ9S4A9I4yhotfH28NwqYSRVm4qgq:ww+asqN5aW/hSD1RW8NwqJ+3

Score

10^/10

Detects win.dharma. 1 IoCs

Processes:

resource yara_rule

sample win_dharma_auto

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

Processes:

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-12_880fc048dbad8094158607f114333d9f_crysis_dharma