Experimental Studies of Ransomware for Developing Cybersecurity Measures

The study presents the results of the experiment on static and dynamic analysis of Petya / ExPetr ransomware. Methods of ransomware distribution, its actions when entering the information system: system scanning, file encryption, Master Boot Record modification and others are considered. The analysis of the ransomware allows to understand its principle of performance and will be used to develop a methodology for forensic study of cyber-attacks that implement ransomware.