General

  • Target

    2024-06-11_77e23ee7c7c21a09ba2fef4f5c9485e7_petya

  • Size

    2.8MB

  • MD5

    77e23ee7c7c21a09ba2fef4f5c9485e7

  • SHA1

    3282afd51ccf9ffc010be8053c07135a91120335

  • SHA256

    378e78cb61c18bcfb7282049420c2ebc513b8d57e051d08c5ed9b5584180a1cb

  • SHA512

    30cb993360c84228e6228294e65fa3b8c1ca15dce3ad7c0c79036ad9b2f6e261f317a3963d2ad834578a9abc96e53c32e9052152dcfd76eb16014ede140d32e8

  • SSDEEP

    49152:ri94FiQoRiPoPoxsWsaLevUBwsKV/cUZFdXrX75hJSCACytBxZV6X4snchEl/jnS:r1k8+dm3Oxji2l8U7WuTMCPeM2ieLTyC

Score
10/10

Malware Config

Signatures

  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-11_77e23ee7c7c21a09ba2fef4f5c9485e7_petya
    .exe windows:5 windows x64 arch:x64

    32ebf6d05d9909a5528c036496ee3157


    Headers

    Imports

    Sections