2024-06-12_413443274c074af176227fea2d42d261_crysis_dharma

General

Target

2024-06-12_413443274c074af176227fea2d42d261_crysis_dharma
Size

92KB
MD5

413443274c074af176227fea2d42d261
SHA1

cfc6a0ba5b694f7f1d70f9678f61b9fe516750c8
SHA256

f8d52ecc66cf99f352a8a0bdf139ec8484f858de6261eeb0b609441fa496fa75
SHA512

6493e1fd36041ec4030fcb61acb8ea3d9b459bb59ea8b25d81fa0bf263c0040ba307c5c173e95431c37b49e95e6dc8296ff6a5c8f5782094a485ae2f658fed5c
SSDEEP

1536:GBwl+KXpsqN5vlwWYyhZ9S4AIf5whLpIp9udJYXAA4P07c29y5h:ww+asqN5aW/hSIsauOA52Ih

Score

10^/10

Detects win.dharma. 1 IoCs

Processes:

resource yara_rule

sample win_dharma_auto

resource	yara_rule
sample	win_dharma_auto

Identifies DHARMA ransomware 4 IoCs

Processes:

resource	yara_rule
sample	Windows_Ransomware_Dharma_aa5eefed
sample	Windows_Ransomware_Dharma_b31cac3f
sample	Windows_Ransomware_Dharma_e9319e4a
sample	Windows_Ransomware_Dharma_942142e3

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-06-12_413443274c074af176227fea2d42d261_crysis_dharma