Malware2017

NotPetya

1Rules

2References

1Folders

2022-12-15Latest

Summary

NotPetya is tracked here as a malware family or toolset with 1 Sigma detection spanning 2017. Coverage centers on windows / process_creation.

Related Detections

Search this threat

Emerging Threatcriticaltest

NotPetya Ransomware Activity

Detects NotPetya ransomware activity in which the extracted passwords are passed back to the main module via named pipe, the file system journal of drive C is deleted and Windows eventlogs are cleared using wevtutil

WindowsProcess Creation

TA0005 · StealthT1218.011 · Rundll32T1685.005 · Clear Windows Event LogsTA0006 · Credential Access+3

Florian Roth (Nextron Systems)+1Wed Jan 162017

References