General

  • Target

    2024-04-11_82331b9a86da18f8044f0ba2b3bb1523_petya

  • Size

    2.8MB

  • MD5

    82331b9a86da18f8044f0ba2b3bb1523

  • SHA1

    10d4f7b223ff4fa11ed8d7a6b4da199a09633580

  • SHA256

    e01d133da06aec20900904a91d5da60acb114cc87d9ad473adff923189b16233

  • SHA512

    9ee79b24ac281a0842a531dd821c24c4c619e563930ebc5c360d005467614627d3fb15da0f058b3dda0f8dd1f7c4d247536b0a2b94cf560a3b4ba02f841f33bd

  • SSDEEP

    49152:ri94FiQoRiPoPoxsWsaLevUBwsKV/cUZFdXrX75hJSCACytBxZV6X4snchEl/jnS:r1k8+dm3Oxji2l8U7WuTMCPeM2ieLTyC

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-11_82331b9a86da18f8044f0ba2b3bb1523_petya
    .exe windows:5 windows x64 arch:x64

    32ebf6d05d9909a5528c036496ee3157


    Headers

    Imports

    Sections