Overview
overview
10Static
static
326b4699a7b...39.exe
windows10-2004-x64
26b4699a7b...39.exe
windows10-ltsc_2021-x64
26b4699a7b...39.exe
windows11-21h2-x64
26b4699a7b...39.exe
windows11-ltsc_2024-x64
4c1dc73791...5c.exe
windows10-2004-x64
4c1dc73791...5c.exe
windows10-ltsc_2021-x64
4c1dc73791...5c.exe
windows11-21h2-x64
4c1dc73791...5c.exe
windows11-ltsc_2024-x64
General
- Target Ransomware.Petya.zip
- Size 538KB
- Sample260901-p44tbazblg
- SHA256 33ca487a65d38bad82dccfa0d076bad071466e4183562d0b1ad1a2e954667fe9
- MD5 e8fb95ebb7e0db4c68a32947a74b5ff9
- SHA1 6f93f85342aa3ea7dcbe69cfb55d48e5027b296c
- SHA512 a2dea77b0283f4ed987c4de8860a9822bfd030be9c3096cda54f6159a89d461099e58efbc767bb8c04ae21ddd4289da578f8d938d78f30d40f9bca6567087320
- SSDEEP 12288:h62An+lYWejkM9KIIoyoAWPPpxS8yrST5UvF50VHCJvD3DpNu7NwRUDxuJnU:hJA+BncEoyojpxS8yrSV0nvHpNu7eQxH
- TLSH T1F3C423620775E85C3CAE4B6EBE5FF6D7E728450D43BA4284267F038079ED6A168190F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral7
Sample
4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c.exe
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target 26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739.bin
- Size 225KB
- SHA256 26b4699a7b9eeb16e76305d843d4ab05e94d43f3201436927e13b3ebafa90739
- MD5 af2379cc4d607a45ac44d62135fb7015
- SHA1 39b6d40906c7f7f080e6befa93324dddadcbd9fa
- SHA512 69899c47d0b15f92980f79517384e83373242e045ca696c6e8f930ff6454219bf609e0d84c2f91d25dfd5ef3c28c9e099c4a3a918206e957be806a1c2e0d3e99
- SSDEEP 6144:DCyjXhd1mialK+qoNr8PxtZE6x5v+k6f:rjXhd8ZlKOrMZE6x5b6f
- TLSH T1FF349C2276E0847DFAB306378CFD36759ABDF9714931890B33C50A0E79605E1A63A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Petya Ransomware
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
- Target 4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c.bin
- Size 788KB
- SHA256 4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c
- MD5 a92f13f3a1b3b39833d3cc336301b713
- SHA1 d1c62ac62e68875085b62fa651fb17d4d7313887
- SHA512 361a5199b5a6321d88f6e7b66eaad3756b4ea7a706fa9dbbe3ffe29217f673d12dd1200e05f96c2175feffc6fecc7f09fda4dd6bfa0ce7bef3d9372f6a534920
- SSDEEP 24576:z0wz1d5bAbWhrc56zQ9T4Ole+5PIuklOjB:Hd5Vhr4IMTbeGPJHjB
- TLSH T152058D22B2D0C07AC8375371982ADB2924B7B9754835010F77E9662E6EB33D35E35E4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Petya Ransomware
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.