General

  • Target

    2024-06-11_975fc60902e96ea64bc9e3ddb01a06df_petya

  • Size

    2.6MB

  • MD5

    975fc60902e96ea64bc9e3ddb01a06df

  • SHA1

    a3f06307ea3be6aedac344d28cf6ea05b5be7242

  • SHA256

    ee49639722c9b9a9767404e35bd365d87892b8a066213990ed95dcf75fa35135

  • SHA512

    34a17a755fc9ca101fa92927ba003cd925a4e804abffa0010e45ab519b743d0d23512b77cd352827684d76f564c1569dea548dd6deaa7349cafff50aada7f11c

  • SSDEEP

    49152:LOmugd4q4wrmisRc+KjtZ5BvGePoIycUkp3Oxji2l8U7WubnMCPeM2ieLTyBql37:58dm3Oxji2l8U7WuTMCPeM2ieLTyBql

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-11_975fc60902e96ea64bc9e3ddb01a06df_petya
    .exe windows:5 windows x86 arch:x86

    c83abca38e86160453165beac88317ca


    Headers

    Imports

    Sections