Petya, Dead but Still Dancing
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID ba6b32f9-db5f-4fd9-befd-bb668ca3c2bc
Fingerprint 970b885ee82b3303
Analysis status DONE
Considered CTI value 0
Text language
Published June 28, 2017, midnight
Added to db Feb. 17, 2023, 9:16 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline UNKNOWN
Title Petya, Dead but Still Dancing
Detected Hints/Tags/Attributes 52/2/12
Source URLs
Redirection Url
Details Source https://blog.kryptoslogic.com/malware/2017/06/28/petya.html
Details Source https://www.kryptoslogic.com/blog/2017/06/petya-dead-but-still-dancing/
URL Provider
Details Provider Source level domain
Details kryptoslogic.com www.kryptoslogic.com
Details kryptoslogic.com blog.kryptoslogic.com
Attributes
Details Type #Events CTI Value
Details File 240 
wmic.exe
Details IPv4 34 
10.0.0.2
Details IPv4 141 
255.255.255.0
Details IPv4 97 
10.0.0.1
Details IPv4 8 
10.0.0.254
Details IPv4 2 
123.123.123.1
Details IPv4 2 
255.255.255.252
Details IPv4 1 
123.123.123.3
Details IPv4 22 
255.0.0.0
Details IPv4 2 
123.0.0.0
Details IPv4 1 
123.0.0.1
Details IPv4 1 
123.255.255.254