EwanMcP

## Petya_ransomware.md

      
              1 file
            
          
              46 forks
            
          
              42 comments
            
          
              209 stars
            
          
                vulnersCom
                / Petya_ransomware.md
            
            
              Last active
              July 6, 2023 19:30
            
          
    #petya #petrWrap #notPetya

Win32/Diskcoder.Petya.C

Ransomware attack.

About

This gist was built by the community of the researchers and was scribed by Kir and Igor from the QIWI/Vulners.
We are grateful for the help of all those who sent us the data, links and information.
Together we can make this world a better place!
Gist updates


## FunctionBotRun.csx

using System.Net;
using Microsoft.Bot.Connector;

public static async Task<HttpResponseMessage> Run(HttpRequestMessage req, TraceWriter log)
{
    log.Verbose($"C# HTTP trigger function processed a request. RequestUri={req.RequestUri}");

    var msg = await req.Content.ReadAsAsync<Message>();

## slack_delete.rb
require 'net/http'
require 'json'
require 'uri'

@token = ''

def list_files
  ts_to = (Time.now - 30 * 24 * 60 * 60).to_i # 30 days ago
  params = {
    token: @token,

	using System.Net;
	using Microsoft.Bot.Connector;

	public static async Task<HttpResponseMessage> Run(HttpRequestMessage req, TraceWriter log)
	{
	log.Verbose($"C# HTTP trigger function processed a request. RequestUri={req.RequestUri}");

	var msg = await req.Content.ReadAsAsync<Message>();
	require 'net/http'
	require 'json'
	require 'uri'

	@token = ''

	def list_files
	ts_to = (Time.now - 30 * 24 * 60 * 60).to_i # 30 days ago
	params = {
	token: @token,