📜 ⬆️ ⬇️

Discovered the second and third variants of WannaCry, including those without a stop-tap



WannaCry (WannaCrypt) 200 000 150 , (Rob Wainwright). « », . , . .

, WannaCry (WannaCrypt) , IP- , Windows . , .

, MalwareTech Blog, , . , « -». , ().



iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com . , HTTP- OK IP- , . , , , . , WannaCry , — .

, , .

« -» , . . , , , . (Matthieu Suiche) Microsoft WannaCry (WannaCrypt) «-», ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com . @benkow_.



, .



. , . , , .

WannaCry. , . , - .

@MalwareTechBlog, sinkhole-, .

, « » — . - , — .

, - WannaCry (WannaCrypt):

Name : 07c44729e2c570b37db695323249474831f5861d45318bf49ccf5d2f5c8ea1cd
LastWriteTime : 5/14/2017 5:56:00 PM
MD5 : D724D8CC6420F06E8A48752F0DA11C66
SHA2 : 07C44729E2C570B37DB695323249474831F5861D45318BF49CCF5D2F5C8EA1CD
Length : 3723264
Name : 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c
LastWriteTime : 5/13/2017 7:26:44 AM
MD5 : DB349B97C37D22F5EA1D1841E3C89EB4
SHA2 : 24D004A104D4D54034DBCFFC2A4B19A11F39008A575AA614EA04703480B1022C
Length : 3723264
Name : 32f24601153be0885f11d62e0a8a2f0280a2034fc981d8184180c5d3b1b9e8cf
LastWriteTime : 5/14/2017 4:11:45 PM
MD5 : D5DCD28612F4D6FFCA0CFEAEFD606BCF
SHA2 : 32F24601153BE0885F11D62E0A8A2F0280A2034FC981D8184180C5D3B1B9E8CF
Length : 3723264


« » , - 01:53:26 GMT (2017–05–14 01:53:26.0).

« » — . , .



2017–05–14 13:05:36. .

, . . WannaCry (WannaCrypt), . .

, Microsoft ( Windows):


Windows 8.1 , SMBv1:

dism /online /norestart /disable-feature /featurename:SMB1Protocol

:

Wana Decrypt0r 2.0

')

Source: https://habr.com/ru/post/357340/


All Articles