Petya starts with Ukraine and then goes global
Tags
country: | Australia India Ukraine United States Of America |
attack-pattern: | Data Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 |
Common Information
Type | Value |
---|---|
UUID | 13df50ff-bf9b-4174-8a70-222fd741e051 |
Fingerprint | d7249db804332683 |
Analysis status | DONE |
Considered CTI value | 1 |
Text language | |
Published | June 27, 2017, midnight |
Added to db | Aug. 31, 2024, 12:50 a.m. |
Last updated | Nov. 15, 2024, 1:37 p.m. |
Headline | Petya starts with Ukraine and then goes global |
Title | Petya starts with Ukraine and then goes global |
Detected Hints/Tags/Attributes | 65/2/28 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://blog.group-ib.com/petya |
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 36 | ✔ | Blog Group-IB | https://blog.group-ib.com/rss.xml | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 269 | cve-2017-0199 |
|
Details | CVE | 126 | cve-2017-0144 |
|
Details | File | 6 | 3ds.7z |
|
Details | File | 6 | accdb.ai |
|
Details | File | 3 | asp.aspx |
|
Details | File | 6 | back.bak |
|
Details | File | 3 | c.cfg |
|
Details | File | 6 | conf.cpp |
|
Details | File | 3 | ctl.dbf |
|
Details | File | 6 | disk.djvu |
|
Details | File | 12 | doc.docx |
|
Details | File | 6 | dwg.eml |
|
Details | File | 1 | b.gz |
|
Details | File | 5 | mail.mdb |
|
Details | File | 2 | ovf.pdf |
|
Details | File | 2 | pmf.ppt |
|
Details | File | 2 | pptx.pst |
|
Details | File | 5 | pvi.py |
|
Details | File | 2 | pyc.rar |
|
Details | File | 1 | ln.sql |
|
Details | File | 1 | tar.vb |
|
Details | File | 2 | ox.vbs |
|
Details | File | 5 | vcb.vdi |
|
Details | File | 5 | vmc.vmdk |
|
Details | File | 5 | work.xls |
|
Details | File | 4 | xvd.zip |
|
Details | File | 14 | perfc.dat |
|
Details | Microsoft Patch Numbers | 18 | KB2871997 |