The threat actor is targeting organizations in Bulgaria, China, Vietnam, and various English-speaking nations.

Source:
https://www.darkreading.com/threat-intelligence/custom-yashma-ransomware-crashes-into-the-scene