2024-06-12_413443274c074af176227fea2d42d261_crysis_dharma

General

Target
2024-06-12_413443274c074af176227fea2d42d261_crysis_dharma
Size 92KB
Sample240612-rx3nsascmj
SHA256 f8d52ecc66cf99f352a8a0bdf139ec8484f858de6261eeb0b609441fa496fa75
MD5 413443274c074af176227fea2d42d261
SHA1 cfc6a0ba5b694f7f1d70f9678f61b9fe516750c8
SHA512 6493e1fd36041ec4030fcb61acb8ea3d9b459bb59ea8b25d81fa0bf263c0040ba307c5c173e95431c37b49e95e6dc8296ff6a5c8f5782094a485ae2f658fed5c
SSDEEP 1536:GBwl+KXpsqN5vlwWYyhZ9S4AIf5whLpIp9udJYXAA4P07c29y5h:ww+asqN5aW/hSIsauOA52Ih
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detects win.dharma. 1 IoCs

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-12_413443274c074af176227fea2d42d261_crysis_dharma

SHA256 f8d52ecc66cf99f352a8a0bdf139ec8484f858de6261eeb0b609441fa496fa75
MD5 413443274c074af176227fea2d42d261
SHA1 cfc6a0ba5b694f7f1d70f9678f61b9fe516750c8
SHA512 6493e1fd36041ec4030fcb61acb8ea3d9b459bb59ea8b25d81fa0bf263c0040ba307c5c173e95431c37b49e95e6dc8296ff6a5c8f5782094a485ae2f658fed5c
SSDEEP 1536:GBwl+KXpsqN5vlwWYyhZ9S4AIf5whLpIp9udJYXAA4P07c29y5h:ww+asqN5aW/hSIsauOA52Ih
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

43472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths