General
- Target Petya.zip
- Size 131KB
- Sample260808-a7r7cseq7s
- SHA256 8555533c588510b0ba9c23ab92e61f74d43ffdaf2aea46f9a74864b777748736
- MD5 c44027945e888d6a820dccbeb50e155c
- SHA1 8ffcb066de084d982ec777abf07205ad9905d76f
- SHA512 a48228d73738f6066e0c6836509d983edfdeb8a6a1561b42ea5c6e032886c55c8e9b2d58217b2dc1767c399400230a84125b003d8f230939360b1524b899091c
- SSDEEP 3072:rOswiBFiVQNhEGnIOQVrvlW49duwVIepJtUxJrTvL/TYR:Dwi7euhEGIOCfxBUxZTPYR
- TLSH T11CD312761D85C02A7A18F731B67C17D9D3BFD48843E6146FA81AD722049B1CEB894FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
4 signatures
150 seconds
Malware Config
Targets
-
- Target [email protected] (1).exe
- Size 225KB
- SHA256 26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739
- MD5 af2379cc4d607a45ac44d62135fb7015
- SHA1 39b6d40906c7f7f080e6befa93324dddadcbd9fa
- SHA512 69899c47d0b15f92980f79517384e83373242e045ca696c6e8f930ff6454219bf609e0d84c2f91d25dfd5ef3c28c9e099c4a3a918206e957be806a1c2e0d3e99
- SSDEEP 6144:DCyjXhd1mialK+qoNr8PxtZE6x5v+k6f:rjXhd8ZlKOrMZE6x5b6f
- TLSH T1FF349C2276E0847DFAB306378CFD36759ABDF9714931890B33C50A0E79605E1A63A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Petya Ransomware
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.