What is Yashma ransomware?

This ransomware discovered by Anti-Ransomware WhiteDefender while investigating cyber security threats is [Yashma Ransomware].
As a result of analyzing this, it was found to be a variant of Chaos Ransomware.

I tested running Yashima ransomware with WhiteDefender's real-time protection function turned off.
Encrypts large files (2MB or more) without damaging internal data. Encryption uses AES-256, making restoration impossible without a decryption key.

This malicious ransomware encrypts files on infected devices and adds an extension of four random characters to file names.
For example, the original file "photo.jpg" is encrypted as "photo.jpg. individual random value", and the "2.png" file is encrypted as "2.png. individual random value".

Afterwards, Yashma ransomware changes the desktop image and creates a ransom note (demand for money) [read_it.txt] file.
The ransom note states that this PC has been infected with Yashma ransomware and all files have been encrypted. To decrypt and restore it, you must purchase decryption software, and payment can only be made with Bitcoin.
The ransom note information on the desktop and the "read_it.txt" file show different amounts for decryption.