March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – NJRAT – Active IOCs
September 21, 2021
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 21, 2021
Rewterz Threat Alert – NJRAT – Active IOCs
September 21, 2021
Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
September 21, 2021
Severity
High
Analysis Summary
WannaCry is also called WCry or WanaCrptor ransomware malware, this ransomware can encrypt all your data files and demands a payment to restore the stolen information, usually in bitcoin with a ransom amount. WannaCry is one of the most dangerous malware ever used for cyberattacks. The attackers behind WannaCry ransomware uses a tool called Eternal Blue to exploit a vulnerability in the Windows Server Message Block, or SMB Protocol. WannaCry ransomware have caused serious disruptions in healthcare sector and financial sector and locked out users from their data.
Impact
- File Encryption
Indicators of Compromise
MD5
- 3345ae752bf8ce297ee33bed8ef8dffd
- 3c8d0fcc71fd6c495a82be741a95e9b2
SHA-256
- 7b52ecf501e14a1d634b8e67bd75f2ae810de38373803b165e0146ceeb308471
- d9b70ccbf1ac757bb7785272a5907eae05a16397e59445999964e466f3173486
SHA-1
- 82ccecde64722d21b0a2c9f5d803145997fb7940
- 374f3291612fa61005bda3cab7427ec18ab4fc4f
Remediation
- Block all threat indicators at your respective controls
- Search for IOCs in your environment.