Possibly updated #Petya ransomware version:
https://www.virustotal.com/en/file/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c/analysis/ … cc @hasherezade
-
@bartblaze after a brief look it seems to me that they just repacked the 'Setup.dll' in a new FUD/crypter. new-> PDFpic.twitter.com/U8iWr96tAi
@hasherezade Yeap, forgot to mention that. Didn't they do that before as well? Haven't really checked it out yet tbh. Cheers! :)