Overview

overview

10

Static

static

3

hola.exe

windows10-2004-x64

10

hola.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    hola.exe
  • Size 123KB
  • Sample260313-xlpknsds2j
  • SHA256 96423b6e7aafabf85099e0e3fffc5a720808636cc28a36a99b000f21c09ae0c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
petyaseonbootkitdefense_evasionpersistenceransomwaretrojan

Malware Config

Targets

    • Target
      hola.exe
    • Size 123KB
    • SHA256 96423b6e7aafabf85099e0e3fffc5a720808636cc28a36a99b000f21c09ae0c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    bootkitdefense_evasionpetyaseonpersistenceransomwaretrojan

    • Detects Petya Ransomware

      ransomware

    • Petya

      Petya is a ransomware written in C#.

      ransomwarepetya

    • Petya family

      petya

    • Seon

      The Seon Ransomware is an encryption ransomware Trojan first observed on November 14, 2018.

      trojanransomwareseon

    • Seon family

      seon

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks