petya

Resubmissions

25/03/2026, 16:32

260325-t2f2padv8m10

25/03/2026, 14:05

260325-rdzssaav7t10

15/01/2026, 01:46

260115-b6579ses8f10

Sharing

Copy URL Twitter E-mail

General

Target
Valorant cheats.zip
Size 130KB
Sample260115-b6579ses8f
SHA256 ce0fd2f72ea202ed1a8a956507b195c8c9fa37b7e516e4296ea8eb70a0050442
MD5 58068e79d25aec858f8a7ad9014aecff
SHA1 21be748192d75ed7083d85cd80711383df2a56c8
SHA512 54f8cd841386a09d90872917d6e05c626c2690317fcfc5ef4706c3b19fe3768300ffbd4c64cddeec6255a74f3cacf878784a97a4e12c2e16b745b7e5f5b572ab
SSDEEP 3072:0D8TpWkoVEBpBkIG48h7zJbMWAHaCKUkkC8l2Vlj0LqelK5:K8TpxppBkI6zJbMWBPUltclOY5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  2_5197172318085843990.exe
- Size 225KB
- SHA256 26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739
- MD5 af2379cc4d607a45ac44d62135fb7015
- SHA1 39b6d40906c7f7f080e6befa93324dddadcbd9fa
- SHA512 69899c47d0b15f92980f79517384e83373242e045ca696c6e8f930ff6454219bf609e0d84c2f91d25dfd5ef3c28c9e099c4a3a918206e957be806a1c2e0d3e99
- SSDEEP 6144:DCyjXhd1mialK+qoNr8PxtZE6x5v+k6f:rjXhd8ZlKOrMZE6x5b6f
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

bootkit petya persistence ransomware
- Detects Petya Ransomware
  ransomware
- Petya
  Petya is a ransomware written in C#.
  ransomware petya
- Petya family
  petya
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detects Petya Ransomware

Petya family

Writes to the Master Boot Record (MBR)

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2