Resubmissions

24/09/2026, 04:14

260924-etscesdg78

12/03/2026, 23:34

260312-3kx4baet7z

03/02/2026, 02:33

260203-c1632sgw6a

06/12/2025, 00:29

251206-as4lvaar3y10

02/12/2025, 16:40

251202-t6s7tavmgx10

02/12/2025, 16:34

251202-t29n1avme110

02/12/2025, 15:52

251202-tbkbesgx7g10

01/12/2025, 15:35

251201-s1m8yabs6f10

14/11/2025, 18:45

251114-xd9kwafp9z

03/11/2025, 07:54

251103-jry5eazjhq10

Analysis

  • max time kernel
    0s
  • max time network
    2s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    16/01/2025, 12:49

General

  • Target
    Malware-1-master/Petya.exe
  • Size 225KB
  • Sample250116-p2cbaasjam
  • SHA256 26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Petya.exe
    "C:\Users\Admin\AppData\Local\Temp\Malware-1-master\Petya.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • Suspicious use of AdjustPrivilegeToken
    PID:1248

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/1248-0-0x000000000041A000-0x0000000000427000-memory.dmp

        memory/1248-1-0x0000000000400000-0x000000000043F000-memory.dmp