General

  • Target

    2024-01-23_38da7aa0c460985aa7022cd83ee084f9_petya

  • Size

    2.8MB

  • MD5

    38da7aa0c460985aa7022cd83ee084f9

  • SHA1

    679b68515efe3b206cd7ff362d756ce753baf86e

  • SHA256

    11ad5ae8d8f459825cdd002ac8cc8d9dd1a47ea4581d69ae12ff2926da8d995b

  • SHA512

    e42b237be0fbe814bc40ae0d3eb4483fed20aaee2cc85905b505d88413ea7a921b628d6ccfe27bb55978741b5f198775153077775b2fdbae497feba4c794559d

  • SSDEEP

    49152:ri94FiQoRiPoPoxsWsaLevUBwsKV/cUZFdXrX75hJSCACytBxZV6X4snchEl/jnS:r1k8+dm3Oxji2l8U7WuTMCPeM2ieLTyC

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-23_38da7aa0c460985aa7022cd83ee084f9_petya
    .exe windows:5 windows x64 arch:x64

    32ebf6d05d9909a5528c036496ee3157


    Headers

    Imports

    Sections