Petya
AlienVault
· Published 20/12/2025 19:35 · Modified 20/12/2025 21:45
Essential information
- Confidence
- 100/100
- Is family
- No
- Published
- 20/12/2025 19:35
- Modified
- 20/12/2025 21:45
- Revoked
- No
- Author / Source
- AlienVault
- Related entities
- 16 attack patterns (mitre), 4 sectors, 1 countries, 35 indicators
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (16)
-
T1490 usesInhibit System Recovery MITRE
-
T1486 usesData Encrypted for Impact MITRE
-
T1070.004 usesFile Deletion MITRE
-
T1120 usesPeripheral Device Discovery MITRE
-
T1021 usesRemote Services MITRE
-
T1485 usesData Destruction MITRE
-
T1562 usesImpair Defenses MITRE
-
T1083 usesFile and Directory Discovery MITRE
-
T1471 MITRE
-
T1204 usesUser Execution MITRE
-
T1561.001 usesDisk Content Wipe MITRE
-
T1135 usesNetwork Share Discovery MITRE
Sectors (4)
-
Logistics targets
-
Transportation targets
-
BFSI targets
-
Consulting targets
Countries (1)
-
United States of America targets
Indicators (35)
-
stix 100/100 Revoked
dbgdetect_procs
· Valid until 28/11/2023 · Source: AlienVault -
stix 100/100 Revoked
SLFPER:Ransom:Win32/Henasome.A!rsm
· Valid until 28/11/2023 · Source: AlienVault -
stix 100/100 Revoked· Valid until 28/11/2023 · Source: AlienVault
-
stix 100/100 Revoked
SLFPER:Ransom:Win32/Henasome.A!rsm
· Valid until 16/07/2024 · Source: AlienVault -
stix 100/100 Revoked
is__elf SHA256 of 3b4ecff980285461642cc4aef60d4a1b9708453e
· Valid until 13/07/2024 · Source: AlienVault -
stix 100/100 Revoked
Win64:Trojan-gen
· Valid until 28/11/2023 · Source: AlienVault -
stix 100/100 Revoked· Valid until 28/11/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 28/11/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 28/11/2023 · Source: AlienVault
-
stix 100/100 Revoked
SHA256 of 736a4cfad1ed83a6a0b75b0474d5e01a3a36f950
· Valid until 29/05/2024 · Source: AlienVault -
stix 100/100 Revoked
ALF:Trojan:Win32/Yodaware.A!dha
· Valid until 28/11/2023 · Source: AlienVault -
stix 100/100 Revoked
Win64:Malware-gen
· Valid until 28/11/2023 · Source: AlienVault