General

  • Target

    2024-01-18_2752033e65cbe4dba003df56df01d52a_petya

  • Size

    2.8MB

  • MD5

    2752033e65cbe4dba003df56df01d52a

  • SHA1

    5e498b7999b0a719a99f244845958e91c5c632e1

  • SHA256

    e21268d3134a3313868cf08169200b383ef42b76b360cc84f2aac7214f17c803

  • SHA512

    0c59f81163ab103ff222b28d16ef5190bb60b96a282d2cf8420e9d7e675c9e22c5fc71ff15c90d64546b1c601f0247a7b6ebb54182a424c4ca8eea2b94ff8d52

  • SSDEEP

    49152:ri94FiQoRiPoPoxsWsaLevUBwsKV/cUZFdXrX75hJSCACytBxZV6X4snchEl/jnS:r1k8+dm3Oxji2l8U7WuTMCPeM2ieLTyC

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_2752033e65cbe4dba003df56df01d52a_petya
    .exe windows:5 windows x64 arch:x64

    32ebf6d05d9909a5528c036496ee3157


    Headers

    Imports

    Sections