WannaCry 2.0 Ransomware
A very quick behavioural analysis of WannaCry / wanacry 2.0 / wanacrypt0r ransomware. Filmed in one take with a view to show how to really quickly analyse a sample, dump some network indicator strings and show the persistence mechanisms of the sample. MD5 84c82835a5d21bbcf75a61706d8ab549
IOCs from this campaign can be found here: https://pastebin.com/2TTCcvQV
Also note that there are many samples in the wild with varying indicators. The IPs in this sample are therefore not an exhaustive list of all you need to monitor / block etc. Some good information being pulled together is also stored here: https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b168
Видео WannaCry 2.0 Ransomware канала Colin Hardy
IOCs from this campaign can be found here: https://pastebin.com/2TTCcvQV
Also note that there are many samples in the wild with varying indicators. The IPs in this sample are therefore not an exhaustive list of all you need to monitor / block etc. Some good information being pulled together is also stored here: https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b168
Видео WannaCry 2.0 Ransomware канала Colin Hardy
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
Running an SQL Injection Attack - Computerphile
WannaCry Ransomware - Revisited. Behavioural and Static Analysis Techniques
Wana Decrypt0r (Wanacry Ransomware) - Computerphile
Analysing a Firefox Malware browserassist.dll - FLARE-On 2018
WannaCry 2.0 - Three ways to find the Kill Switch
Reversing WannaCry Part 1 - Finding the killswitch and unpacking the malware in #Ghidra
Writing Viruses for Fun, not Profit
Infoshare 2017: Piotr Konieczny (niebezpiecznik.pl) – WannaCry - 250 tysięcy ofiar ze 150 krajów
Playing with WannaCry Ransomware
How easy is it to capture data on public free Wi-Fi? - Gary explains
Overcome Self-Defending Malware - Tools, Techniques and Lab Setup
Analysing Obfuscated VBA - Extracting indicators from a Trickbot downloader
Kaspersky vs Ransomware
Breaking The Kill Chain: A Defensive Approach
Zyxel Backdoor & A Known Plaintext Attack
Langner's Stuxnet Deep Dive
Quick Behavioural Analysis of NotPetya / Petrwrap Ransomware
Reversing WannaCry Part 2 - Diving into the malware with #Ghidra
DEMO: The Anatomy of Ransomware
SUNBURST SolarWinds Malware - Tools, Tactics and Methods to get you started with Reverse Engineering