The developer has released OpenPetya v2.0.0, an educational proof-of-concept project designed to demonstrate the internal mechanics of bootkits, UEFI applications, and low-level disk encryption workflows.

Key Points

• OpenPetya v2.0.0 provides a research-focused implementation of MBR bootloading and UEFI chainloading written in Assembly, C, and C++.
• The project simulates core ransomware features, including Salsa20-based cryptography and NTFS Master File Table (MFT) encryption, for study purposes.
• Version 2.0.0 intentionally excludes MFT encryption in its UEFI component to prevent potential abuse against modern Windows operating systems.
• The tool includes a user-mode controller, OpenPetya.exe, which manages drive selection, installation, and system reboot triggering.
• The software is strictly intended for use in virtualized environments to analyze operating system internals and bootloader architecture.

Why it Matters

This project provides a transparent, open-source resource for security researchers to understand the low-level operations of bootkits that are often obscured in real-world malware. By documenting these mechanisms, it helps developers and security professionals build more resilient systems against unauthorized boot-level modifications.