Ransomware.Petrwrap 2.zip

Classification: Malicious

Ransomware.Petrwrap 2.zip is a malicious file sample. Linked to Mimikatz malware. 4 sightings from Triage and ThreatFox Abuse.ch, last seen 2026-10-16.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: MIMIKATZ (S0002)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mimikatz Triage 2026-02-21 01:09:57 2026-10-16 10:49:00 malicious-activity S0002 Mimikatz
MimiKatz ThreatFox Abuse.ch 2025-03-17 17:37:57 2025-03-19 17:24:40 S0002 Mimikatz

Tags

win.mimikatz mimikatz bootkit discovery execution persistence spyware stealer defense_evasion privilege_escalation

Sample information

Filenames
Ransomware.Petrwrap 2.zip, Ransomware.Petrwrap.zip
MD5
6884a35803f2e795fa4b121f636332b4
SHA-1
527bfbf4436f9cce804152200c4808365e6ba8f9
SHA-256
cf01329c0463865422caa595de325e5fe3f7fba44aabebaae11a6adfeb78b91c
SHA-512
262732a9203e2f3593d45a9b26a1a03cc185a20cf28fad3505e257b960664983d2e4f2b19b9ff743015310bf593810bd049eb03d0fd8912a6d54de739742de60
First indexed
2025-03-17 18:18:23
Last updated
2026-10-16 10:55:25