✕
Request a Demo
Rewterz
Rewterz Threat Alert – NJRAT – Active IOCs
September 21, 2021
Rewterz
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 21, 2021

Rewterz Threat Alert – WannaCry Ransomware – Active IOCs

Severity

High

Analysis Summary

WannaCry is also called WCry or WanaCrptor ransomware malware, this ransomware can encrypt all your data files and demands a payment to restore the stolen information, usually in bitcoin with a ransom amount. WannaCry is one of the most dangerous malware ever used for cyberattacks. The attackers behind WannaCry ransomware uses a tool called Eternal Blue to exploit a vulnerability in the Windows Server Message Block, or SMB Protocol. WannaCry ransomware have caused serious disruptions in healthcare sector and financial sector and locked out users from their data.

Impact

  • File Encryption

Indicators of Compromise

MD5

  • 3345ae752bf8ce297ee33bed8ef8dffd
  • 3c8d0fcc71fd6c495a82be741a95e9b2

SHA-256

  • 7b52ecf501e14a1d634b8e67bd75f2ae810de38373803b165e0146ceeb308471
  • d9b70ccbf1ac757bb7785272a5907eae05a16397e59445999964e466f3173486

SHA-1

  • 82ccecde64722d21b0a2c9f5d803145997fb7940
  • 374f3291612fa61005bda3cab7427ec18ab4fc4f

Remediation

  • Block all threat indicators at your respective controls
  • Search for IOCs in your environment.