3 ms·
I have taken the liberty to download a sample of WannaCry and I can see the "killswitch" domain just running strings on the binary. $ strings Downloads/24d
by jtl999 9y ago
I have taken the liberty to download a sample of WannaCry and I can see the "killswitch" domain just running strings on the binary.
$ strings Downloads/24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c.bin |grep .com
__p__commode
http://www.iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com