NotPetya Technical Analysis | LogRhythm
Tags
attack-pattern: Data Direct Credentials - T1589.001 Data Destruction - T1662 Data Destruction - T1485 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Scheduled Task - T1053 Windows Management Instrumentation - T1047 Data Destruction
Show in Graph
Common Information
Type Value
UUID 75babe63-f3ca-442e-8424-b3e2ee03bedd
Fingerprint bdb5b93fed258681
Analysis status DONE
Considered CTI value 0
Text language
Published June 30, 2017, midnight
Added to db Jan. 18, 2023, 9:58 p.m.
Last updated Nov. 3, 2024, 4:25 p.m.
Headline NotPetya Technical Analysis
Title NotPetya Technical Analysis | LogRhythm
Detected Hints/Tags/Attributes 62/1/5
Source URLs
Redirection Url
Details Source https://logrhythm.com/blog/notpetya-technical-analysis/
URL Provider
Details Provider Source level domain
Details logrhythm.com logrhythm.com
Attributes
Details Type #Events CTI Value
Details File 14 
perfc.dat
Details File 1 
027cc.dll
Details File 3 
%windir%\dllhost.dat
Details sha256 11 
027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745
Details sha256 3 
64b0b58a2c030c77fdb2b537b2fcc4af432bc55ffb36599a31d418c7c69e94b1