- Home
- Detectable Ransomware
- Petya NSA EE
Ransomware Research
Petya NSA EE Ransomware
Petya NSA EE is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on May 1, 2017, this ransomware has been actively targeting systems worldwide. Security researchers also track this malware under the aliases: Petya : NSA Exploit Edition (NSA EE), Petna, NotPetya, NonPetya, Nyetya, Petya.A, ExPetya.
Quick Facts
- Ransomware Family
- Petya NSA EE
- First Seen
- May 1, 2017
- Known Aliases
- Petya : NSA Exploit Edition (NSA EE)PetnaNotPetyaNonPetyaNyetyaPetya.AExPetya
How Petya NSA EE Ransomware Works
Targeted Files
MBR destroyer
Ransom Note and Payment Demands
After encrypting files, Petya NSA EE displays ransom notes demanding payment for file recovery:
Ransom message:
notes/note.txt
Note locations:
Boot
Technical Indicators
Associated Executable Files
The following executable files are associated with Petya NSA EE ransomware:
NotPetya%20DLL.dll.exe
perfc.dat
freetp.exe
NotPetya.bin
pet.exe
weird.dll
NotPetya DLL.dll.exe
binary
Petya病毒样本.exe
Ransom.Petya.dll
petwarp.exe
2A5AB806.vsc
A.exe
not_petya.exe
petya.dll
petrwrap20210227202552.exe
ransomware.exe
Petya.exe
Trojan.Ransom.Petya.exe
Ransomware GoldenEye.exe
Ransomware GoldenEye.B.exe
Ransomware Petya 2.exe
user-thumbnail.png
notpetya
myfile.exe
674.json
pt2.exe
NotPetya.exe
Petya.dll
Nyetya.exe
NotPetya-Ransomware
petya.exe
content_117915.dll
notpetya.exe
PetyaA.dat
noa.exe
281552
Petya_[AT]_ParsingTeam.exe
petwrap.exe
Petya Ransomware.exe
171362
Sample 2.bin
7.Petya-GoldenEye.bin
1.exe
Ransomware.NotPetya
exxor.dll
petwrap.dll
code2.bin
ZvitPublishedObjects.dll
ZvitPublishedObjects1.dll
ZvitPublishedObjects_284.dll
A0428015.dll
zvitpublishedobjects.dll
Elastio Can Help You
Don't let Petya NSA EE ransomware take over your data
Elastio provides advanced ransomware protection and recovery solutions to keep your organization safe.
About This Analysis
This Petya NSA EE ransomware analysis is part of Elastio's comprehensive ransomware detection database. Elastio provides advanced ransomware protection and recovery solutions, helping organizations defend against and recover from ransomware attacks like Petya NSA EE.
Last updated: July 30, 2025