Overview

overview

10

Static

static

3

2024-10-04...ya.exe

windows7-x64

2024-10-04...ya.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya

  • Size

    21.8MB

  • Sample

    241004-19stsazapm

  • MD5

    05fd0124c42461ef553b4b17d18142f9

  • SHA1

    9407317cdb3dcc5b329bfa1c096e9c007f223fac

  • SHA256

    c3a16fdcaf3398eaf253c853372589fc990caf33caec540703cacc49c2635280

  • SHA512

    803bb4b39eff8c1e5ba5d0f3bbf4d498cf11f527c4496b1c5d91e175190b7f59f144064ec6c077e630a568092eb4fee7d989a4735fd6f8f95dcc0a2cb64afe98

  • SSDEEP

    393216:/xZI4Q3yN3jywhuOHKigKL846FWCsZgkJbnjBq2++1NBHqnW/WiaTh0IF6JN6tkI:PQ3yRjyOnzrIWNLJbjBq2ZN0W/6hKayg

Score
10/10
defense_evasionevasionexecutionimpactpersistenceprivilege_escalationransomwaretrojan

Malware Config

Targets

    • Target

      2024-10-04_05fd0124c42461ef553b4b17d18142f9_petya

    • Size

      21.8MB

    • MD5

      05fd0124c42461ef553b4b17d18142f9

    • SHA1

      9407317cdb3dcc5b329bfa1c096e9c007f223fac

    • SHA256

      c3a16fdcaf3398eaf253c853372589fc990caf33caec540703cacc49c2635280

    • SHA512

      803bb4b39eff8c1e5ba5d0f3bbf4d498cf11f527c4496b1c5d91e175190b7f59f144064ec6c077e630a568092eb4fee7d989a4735fd6f8f95dcc0a2cb64afe98

    • SSDEEP

      393216:/xZI4Q3yN3jywhuOHKigKL846FWCsZgkJbnjBq2++1NBHqnW/WiaTh0IF6JN6tkI:PQ3yRjyOnzrIWNLJbjBq2ZN0W/6hKayg

    Score
    10/10
    defense_evasionevasionexecutionimpactpersistenceprivilege_escalationransomwaretrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

1
T1047

Persistence

Boot or Logon Autostart Execution

2
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Winlogon Helper DLL

1
T1547.004

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Event Triggered Execution

2
T1546

Image File Execution Options Injection

1
T1546.012

Netsh Helper DLL

1
T1546.007

Privilege Escalation

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Boot or Logon Autostart Execution

2
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Winlogon Helper DLL

1
T1547.004

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Event Triggered Execution

2
T1546

Image File Execution Options Injection

1
T1546.012

Netsh Helper DLL

1
T1546.007

Defense Evasion

Abuse Elevation Control Mechanism

1
T1548

Bypass User Account Control

1
T1548.002

Direct Volume Access

1
T1006

Impair Defenses

4
T1562

Disable or Modify System Firewall

1
T1562.004

Disable or Modify Tools

2
T1562.001

Safe Mode Boot

1
T1562.009

Indicator Removal

2
T1070

File Deletion

2
T1070.004

Modify Registry

5
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

3
T1490

Tasks