Tag: NotPetya
1 article
Date
Thu 21 March 2019
Authors Adrien Guinet, Alexandre Gazet, Fabien Perigaud, Joffrey Czarny
Category Reverse-Engineering
Authors Adrien Guinet, Alexandre Gazet, Fabien Perigaud, Joffrey Czarny
Category Reverse-Engineering
NotPetya [0] is a variant of the Petya ransomware [1] that appeared in June 2017 in Ukraine. These malwares have the particularity to rewrite the MBR of computers that are still using an old fashioned BIOS-based booting system. This MBR encrypts the Master File Table (MFT) of the underlying NTFS partition systems.