General
- Target aha.exe
- Size 1KB
- Sample261016-s6y8dsg13v
- SHA256 3f838323f2c890acf728b0e439be51e34e0e4c28f2c4abfad9cc4eca11fb0472
- MD5 a89ac3eca2c0ea64f2593ba2a1076193
- SHA1 7e5b4aa718c1fc684c571ed9169cf488e31d704d
- SHA512 98f769d4338ca25e04b698107c3e905abe99063d9f5dd2cc559c858c96461fc21486e47f52e4e1c14c53e8b4532b10535043eb8b50c0a2e1821fd3971b45ad3b
- TLSH T102316803D6AAE87ACC0E03B00AC3D66632FE204447A31A037C61172FB4612242024F22
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aha.exe
Resource
win10v2004-20260911-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target aha.exe
- Size 1KB
- SHA256 3f838323f2c890acf728b0e439be51e34e0e4c28f2c4abfad9cc4eca11fb0472
- MD5 a89ac3eca2c0ea64f2593ba2a1076193
- SHA1 7e5b4aa718c1fc684c571ed9169cf488e31d704d
- SHA512 98f769d4338ca25e04b698107c3e905abe99063d9f5dd2cc559c858c96461fc21486e47f52e4e1c14c53e8b4532b10535043eb8b50c0a2e1821fd3971b45ad3b
- TLSH T102316803D6AAE87ACC0E03B00AC3D66632FE204447A31A037C61172FB4612242024F22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Detects Petya Ransomware
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.