Overview

overview

10

Static

static

10

sada.7z

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    sada.7z
  • Size 84.8MB
  • Sample251007-xwkpgaxwdv
  • SHA256 14aa3643ba7ec062e8886814e6c74904eea5cf9c64c0df6e52d390dee6dbfec9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
celestialratlinkqrransomware

Malware Config

Extracted

Ransom Note
  • You became victim of the PETYA RANSOMWARE! The harddisks of your computer have been encrypted with an military grade encryption algorithm. There is no way to restore your data without a special key. You can purchase this key on the darknet page shown in step 2. To purchase your key and restore your data, please follow these three easy steps: 1. Download the Tor Browser at "https://www.torproject.org/". If you need help, please google for "access onion page". 2. Visit one of the following pages with the Tor Browser: http://petya37h9lggpod1.onion/BakaWB http://petya5km01aakfd7.onion/BakaWB 3. Enter your personal decryption code there: tbRoUv-Fs6ZyW-bEWEI7-AXlIsL-DFdTbY-z0RD0M-sZ3OVq-YViv5Q-J12yQD-jarpSS- SCNcQ9-cI9ULO-NCFJzk-YyuHyH-jKwrWW If you already purchased your key, please enter it below.
URLs

  • http://petya37h9lggpod1.onion/BakaWB

  • http://petya5km01aakfd7.onion/BakaWB

Targets

    • Target
      sada.7z
    • Size 84.8MB
    • SHA256 14aa3643ba7ec062e8886814e6c74904eea5cf9c64c0df6e52d390dee6dbfec9
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks