General

  • Target

    2024-04-19_9fd85c507ab9c61aea9460bf80308103_petya

  • Size

    2.6MB

  • MD5

    9fd85c507ab9c61aea9460bf80308103

  • SHA1

    dd2cc5b737076dc78ba928b81e8dce91af64f4af

  • SHA256

    d9f764de2565100fef5c99f428cee5f370e01c7ca31537d7db4f58470b03f92b

  • SHA512

    a07bf40949a8655a6ebc967b7e7c0246976d67bc66f6a043ca81b0cf7b026cbca4f2453872a5b65af20ab0132569862283a842ceb0e337babb53bbc038f13939

  • SSDEEP

    49152:W2NTd4q4wrmisRc+KjtZ5BvGePoIycUkp3Oxji2l8U7WubnMCPeM2ieLTyBql3uZ:WBdm3Oxji2l8U7WuTMCPeM2ieLTyBql

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs

Files

  • 2024-04-19_9fd85c507ab9c61aea9460bf80308103_petya
    .exe windows:5 windows x86 arch:x86

    188f87037513b72c7f8c2b146e7543ae


    Code Sign

    Headers

    Imports

    Sections