3 ms·

https://github.com/leo-stone/hack-petya/blob/master/main.go#L107-L108 https://github.com/leo-stone/hack-petya/blob/master/main.go#... Looks like it used a [1-9

https://github.com/leo-stone/hack-petya/blob/master/main.go#L107-L108 https://github.com/leo-stone/hack-petya/blob/master/main.go#... Looks like it used a [1-9a-xA-X]{8} key. Even with a CSPRNG that's only 46 bits of entropy. You can brute force that in 2-3 hours with adequate hardware.

matt_wulfeck 11y ago
Don't these things generate a unique key for each file?
- AnimalMuppet 11y ago
  Even if they do, the per-file keys must be algorithmically-derived from the master key. (Otherwise, how can it unencrypt the files after you pay the ransom?)
- vetrom 11y ago
  User-space malware, sure. Petya does a full-disk encryption.