General

  • Target

    2024-04-08_37055e4075e87a935d5d9d0a414ac486_petya

  • Size

    2.8MB

  • MD5

    37055e4075e87a935d5d9d0a414ac486

  • SHA1

    d3e45f7512303546710edbe88a0e77a76a60bafb

  • SHA256

    8914a41beefdcf240b63e148b451ec4398b185baff0a6a7ff95374c336a091af

  • SHA512

    1420de3965db51e4c3b227ebbf08cbf7eddf27da80d18ca7db4ebc4039a27a74ab58c7cb8efc7f311658f86cd22a543cc1b97eb4fb5c7bda732128a901c35ec0

  • SSDEEP

    49152:ri94FiQoRiPoPoxsWsaLevUBwsKV/cUZFdXrX75hJSCACytBxZV6X4snchEl/jnS:r1k8+dm3Oxji2l8U7WuTMCPeM2ieLTyC

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_37055e4075e87a935d5d9d0a414ac486_petya
    .exe windows:5 windows x64 arch:x64

    32ebf6d05d9909a5528c036496ee3157


    Headers

    Imports

    Sections