Dharma (.cezar)
This ransomware has no known way of decrypting data at this time.
It is recommended to backup your encrypted files, and hope for a solution in the future.
Identified by
sample_extension: .id-<id>.[<email>].arena
sample_bytes: [0x1C0C0 - 0x1C100] 0x00000000020000000CFE7A410000000000000000000000002000000000000000
custom_rule: Original filename "015823297_01_00010540.pdf" after filemarker