General
- Target se.7z
- Size 20.8MB
- Sample251007-xn996axvdv
- SHA256 67cd76f4e1a6e27a933a5ff64e08addbf04a31995904afc38a0f188dfbdc826b
Score
10/10
Malware Config
Extracted
Ransom Note
- You became victim of the PETYA RANSOMWARE! The harddisks of your computer have been encrypted with an military grade encryption algorithm. There is no way to restore your data without a special key. You can purchase this key on the darknet page shown in step 2. To purchase your key and restore your data, please follow these three easy steps: 1. Download the Tor Browser at "https://www.torproject.org/". If you need help, please google for "access onion page". 2. Visit one of the following pages with the Tor Browser: http://petya37h9lggpod1.onion/BakaWB http://petya5km01aakfd7.onion/BakaWB 3. Enter your personal decryption code there: tbRoUv-Fs6ZyW-bEWEI7-AXlIsL-DFdTbY-z0RD0M-sZ3OVq-YViv5Q-J12yQD-jarpSS- SCNcQ9-cI9ULO-NCFJzk-YyuHyH-jKwrWW If you already purchased your key, please enter it below.
URLs
-
http://petya37h9lggpod1.onion/BakaWB
-
http://petya5km01aakfd7.onion/BakaWB
Targets
-
- Target se.7z
- Size 20.8MB
- SHA256 67cd76f4e1a6e27a933a5ff64e08addbf04a31995904afc38a0f188dfbdc826b
Score10/10-
CelestialRAT
CelestialRAT is a trojan written in C#.
-
Celestialrat family
-
Executes dropped EXE