Resubmissions

12-11-2024 14:46

241112-r5s5bavejl 7

12-11-2024 14:40

241112-r18zzaxqck 7

12-11-2024 01:14

241112-bltczazqbt 7

General

  • Target

    2024-11-12_ea13404029e9f88e25c64f601a5ea7c5_petya

  • Size

    1.0MB

  • Sample

    241112-bltczazqbt

  • MD5

    ea13404029e9f88e25c64f601a5ea7c5

  • SHA1

    cd256cb5985bbd3757bb7af11debe1104c64bc05

  • SHA256

    59353ebb6a21badac7cfb1d89a5092eb1bc58b71f8dafa3ae9e2fad38f7dc20c

  • SHA512

    74bfd29482e25e2a5af46910c63fddc3cd16eb657befa400529bd956db0bcbbdd2854c1c8c4e14fbb780c26f8b0ab67ae5bfab671f9d6c1993f3bea90fcc853a

  • SSDEEP

    12288:flQDoXoLuMPYKHjlqXCcIjSOqXCcIjZ0KHjl:dooXQPsko

Malware Config

Targets

    • Target

      2024-11-12_ea13404029e9f88e25c64f601a5ea7c5_petya

    • Size

      1.0MB

    • MD5

      ea13404029e9f88e25c64f601a5ea7c5

    • SHA1

      cd256cb5985bbd3757bb7af11debe1104c64bc05

    • SHA256

      59353ebb6a21badac7cfb1d89a5092eb1bc58b71f8dafa3ae9e2fad38f7dc20c

    • SHA512

      74bfd29482e25e2a5af46910c63fddc3cd16eb657befa400529bd956db0bcbbdd2854c1c8c4e14fbb780c26f8b0ab67ae5bfab671f9d6c1993f3bea90fcc853a

    • SSDEEP

      12288:flQDoXoLuMPYKHjlqXCcIjSOqXCcIjZ0KHjl:dooXQPsko

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks