https://virustotal.com/ru/file/027cc450 ... /analysis/
https://virustotal.com/ru/file/e5c643f1 ... /analysis/
Petya malware
15 posts
• Page 2 of 2 • 1, 2
Ransomware.Petya
by tomatto007 » Tue Jun 27, 2017 5:46 pm
You do not have the required permissions to view the files attached to this post.
- tomatto007
- Posts: 21
- Joined: Fri Mar 19, 2010 8:16 pm
- Reputation point: 2
Re: Petya malware
by Damian9303 » Wed Jun 28, 2017 2:50 pm
Is this the one that struck out yesterday that infected computers via Network?
- Damian9303
- Posts: 1
- Joined: Tue Nov 17, 2015 11:57 pm
- Reputation point: 0
Re: Petya malware
by maddog4012 » Wed Jun 28, 2017 7:20 pm
Damian9303 wrote:Is this the one that struck out yesterday that infected computers via Network?
yes it is
-
maddog4012 - Posts: 43
- Joined: Mon Aug 04, 2014 6:53 pm
- Reputation point: 35
Re: Petya malware
by Peior Crustulum » Wed Jun 28, 2017 11:11 pm
maddog4012 wrote:Damian9303 wrote:Is this the one that struck out yesterday that infected computers via Network?
yes it is
At the risk of sounding like a complete idiot, I was unable to execute the sample.
Am I missing something?
- Peior Crustulum
- Posts: 1
- Joined: Wed Jun 28, 2017 11:02 am
- Reputation point: 0
Re: Petya malware
by waffles2.0 » Thu Jun 29, 2017 11:45 am
The sample provided by the original comment is an older sample, the new one doesn't have the skull and crossbones. Attached is the sample that struck out hitting lots of companies over the past few days.
Use the command line to execute:
You should also know that it schedules a shutdown /sleeps for about an hour after infection so you have to wait a while but once you boot up after shutdown it should take you to a screen like this:
then shortly after this:
Use the command line to execute:
- Code: Select all
rundll32.exe 027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745_98STJd8lju.dll, #1
You should also know that it schedules a shutdown /sleeps for about an hour after infection so you have to wait a while but once you boot up after shutdown it should take you to a screen like this:
then shortly after this:
You do not have the required permissions to view the files attached to this post.
- waffles2.0
- Posts: 21
- Joined: Mon Aug 01, 2016 9:49 am
- Reputation point: 7
15 posts
• Page 2 of 2 • 1, 2
Who is online
Users browsing this forum: No registered users and 11 guests