Overview
overview
3Static
static
3PetyaDecryptor.rar
windows10-1703-x64
3PetyaDecryptor.rar
windows10-2004-x64
3PetyaDecryptor.rar
windows11-21h2-x64
3PetyaDecry...aw.txt
windows10-1703-x64
1PetyaDecry...aw.txt
windows10-2004-x64
1PetyaDecry...aw.txt
windows11-21h2-x64
3PetyaDecry..._1.dll
windows10-1703-x64
3PetyaDecry..._1.dll
windows10-2004-x64
3PetyaDecry..._1.dll
windows11-21h2-x64
3PetyaDecry...20.dll
windows10-1703-x64
3PetyaDecry...20.dll
windows10-2004-x64
3PetyaDecry...20.dll
windows11-21h2-x64
3PetyaDecry...ey.exe
windows10-1703-x64
1PetyaDecry...ey.exe
windows10-2004-x64
1PetyaDecry...ey.exe
windows11-21h2-x64
1Analysis
-
max time kernel
135s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
31-05-2024 21:39
Static task
static1
Behavioral task
behavioral1
Sample
PetyaDecryptor.rar
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
PetyaDecryptor.rar
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
PetyaDecryptor.rar
Resource
win11-20240508-en
Behavioral task
behavioral4
Sample
PetyaDecryptor/id_raw.txt
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
PetyaDecryptor/id_raw.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
PetyaDecryptor/id_raw.txt
Resource
win11-20240508-en
Behavioral task
behavioral7
Sample
PetyaDecryptor/libcrypto-1_1.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
PetyaDecryptor/libcrypto-1_1.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
PetyaDecryptor/libcrypto-1_1.dll
Resource
win11-20240426-en
Behavioral task
behavioral10
Sample
PetyaDecryptor/msvcr120.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
PetyaDecryptor/msvcr120.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral12
Sample
PetyaDecryptor/msvcr120.dll
Resource
win11-20240508-en
Behavioral task
behavioral13
Sample
PetyaDecryptor/petya_key.exe
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
PetyaDecryptor/petya_key.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
PetyaDecryptor/petya_key.exe
Resource
win11-20240426-en
General
-
Target
PetyaDecryptor/id_raw.txt
-
Size
77B
-
MD5
670a3371e069a1380ee66e3feef4c9ad
-
SHA1
25407dad7bca1719f07dfd2322f23f5988722f1a
-
SHA256
6f50b2efa4ec02ed27d1a5e0a72efd48dbc28f0dcbe729da03072e56022b1b1a
-
SHA512
2a6e311d1536ac0fb790b5313d9376ea472decd89a9a9c6c5fff7989b164afcc471d0d59670a00182e51f500769b07f7a422a9eea2ddac8aabd132d1df6e66fd
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 164 NOTEPAD.EXE