daily pastebin goal
54%
SHARE
TWEET

Untitled

a guest Jun 27th, 2017 1,369 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Petya/Petwrap ransomware
  2.  
  3. Affected countries: UK, Ukraine, India, the Netherlands, Spain, Denmark, and others
  4.  
  5. Behavior:
  6. Encrypts MFT (Master File Tree) tables for NTFS partitions and overwrites the MBR (Master Boot Record) with a custom bootloader that shows a ransom note and prevents victims from booting their computer.
  7.  
  8.  
  9. Actions to be taken:
  10. 1. Block source E-mail address
  11. wowsmith123456@posteo.net
  12.  
  13. 2. Block domains:
  14. http://mischapuk6hyrn72.onion/
  15. http://petya3jxfp2f7g3i.onion/
  16. http://petya3sen7dyko2n.onion/
  17. http://mischa5xyix2mrhd.onion/MZ2MMJ
  18. http://mischapuk6hyrn72.onion/MZ2MMJ
  19. http://petya3jxfp2f7g3i.onion/MZ2MMJ
  20. http://petya3sen7dyko2n.onion/MZ2MMJ
  21. http://benkow.cc/71b6a493388e7d0b40c83ce903bc6b04.bin
  22. COFFEINOFFICE.XYZ
  23. http://french-cooking.com/
  24.  
  25. 3. Block IPs:
  26. 95.141.115.108
  27. 185.165.29.78
  28. 84.200.16.242
  29. 111.90.139.247
  30.    
  31. 4. Apply patches:
  32. Refer(in Russian): https://habrahabr.ru/post/331762/
  33.  
  34. 5. Disable SMBv1
  35.  
  36. 6. Update Anti-Virus hashes
  37. a809a63bc5e31670ff117d838522dec433f74bee
  38. bec678164cedea578a7aff4589018fa41551c27f
  39. d5bf3f100e7dbcc434d7c58ebf64052329a60fc2
  40. aba7aa41057c8a6b184ba5776c20f7e8fc97c657
  41. 0ff07caedad54c9b65e5873ac2d81b3126754aac
  42. 51eafbb626103765d3aedfd098b94d0e77de1196
  43. 078de2dc59ce59f503c63bd61f1ef8353dc7cf5f
  44. 7ca37b86f4acc702f108449c391dd2485b5ca18c
  45. 2bc182f04b935c7e358ed9c9e6df09ae6af47168
  46. 1b83c00143a1bb2bf16b46c01f36d53fb66f82b5
  47. 82920a2ad0138a2a8efc744ae5849c6dde6b435d
  48.  
  49. myguy.xls EE29B9C01318A1E23836B949942DB14D4811246FDAE2F41DF9F0DCD922C63BC6
  50. BCA9D6.exe 17DACEDB6F0379A65160D73C0AE3AA1F03465AE75CB6AE754C7DCB3017AF1FBD
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top