INFO

---

Payload is mainly used for propagation and encryption of MBR + Files

•    Summary
•    Quick Video to show MBR encryption
•    WriteUp
•    NetworkActivity (Automatically generated by my sandbox)
  
•    Handles (Automatically generated by my sandbox)
  
•    DLL's (Automatically generated by my sandbox)
  
•    Download Process Watch tool, with parent child view (Passwd: foo)
  
•    Psexec & propagation
  
•    Petya / NotPetya in Action (Video)
  
  

  Malicious Hashes

  F8DBABDFA03068130C277CE49C60E35C029FF29D9E3C74C362521F3FB02670D5
  027CC450EF5F8C5F653329641EC1FED91F694E0D229928963B30F6B0D7D3A745
  02EF73BD2458627ED7B397EC26EE2DE2E92C71A0E7588F78734761D8EDBDCD9F