4 ms·

Dissecting WannaCry

• i336_ 9y ago
  Nice. > Something but probably nothing dumps: > ... > 004074CB - function call with arg WNcry@2o17 Ah, he got one of those binaries. Almost every binary in the wild is using the above string as the default password.
• sqeaky 9y ago
  This is blocked by my work's security filter. Is there a mirror?
  • tempay 9y ago
    https://web.archive.org/web/20170523150125/http://gerbilnotes.blogspot.com/2017/05/dissecting-wannacry-blog-by-gerbil-wcry2.html https://web.archive.org/web/20170523150125/http://gerbilnote...
• pcwalton 9y ago
  Interesting that Ruby was targeted (.rb), but not Python (.py). Also odd that .m4a wasn't targeted, while .mp4 was.