I have put together a little "petri dish" test environment and started looking for a sample that has the exploit. Some samples out there simply do not have the exploit code, and even tough they will encrypt the files locally, sometimes the mounted shares too, they would not spread.
Luckily, I have found this nice blog post from McAfee Labs: https://securingtomorrow.mcafee.com/mcafee-labs/analysis-wannacry-ransomware/ with the reference to the sample SHA256: 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c (they keep referring to samples with MD5, which is still a very-very bad practice, but the hash is MD5: DB349B97C37D22F5EA1D1841E3C89EB4)
Once I got the sample from the VxStream Sandbox site, dropped it in the test environment, and monitored it with Security Onion. I was super happy to see it spreading, despite the fact that for the first run my Windows 7 x64 VM went to BSOD as the EthernalBlue exploit failed.
But the second run was a full success, all my Windows 7 VMs got infected. Brad was so kind and made a guest blog post at one of my favorite sites, www.malware-traffic-analysis.net so you can find the pcap, description of the test environment and some screenshots here: http://malware-traffic-analysis.net/2017/05/18/index2.html
Related links
- Game Hacking
- Computer Hacker
- Pentest Tools Windows
- Wifi Hacker Tools For Windows
- Hacker Hardware Tools
- Tools 4 Hack
- Hack And Tools
- Pentest Tools Android
- Hacking Tools
- Pentest Tools Website
- Hacker Tools 2020
- Hack Tools Github
- Hacking Tools For Pc
- Hacker Tools
- Hacking Tools Mac
- Best Hacking Tools 2020
- Hacker Tools Github
- Hacking Tools Windows
- How To Make Hacking Tools
- Pentest Recon Tools
- Hacker Tools Linux
- Hacker Tools Hardware
- Hak5 Tools
- Hacking Tools Name
- Hacking Tools Windows 10
- Nsa Hack Tools Download
- Hacker Tools Free
- Hacking Tools Name
- Pentest Tools Android
- Hacker Tools 2019
- Hacker
- Pentest Tools
- Hacker Tools Apk Download
- Hack Tools Download
- Hacking Tools For Pc
- Free Pentest Tools For Windows
- Ethical Hacker Tools
- Computer Hacker
- Hacker Tools Software
- Hacker Tools Free
- Pentest Tools Port Scanner
- Hacking Tools For Windows 7
- Pentest Tools For Ubuntu
- Hacking Tools For Beginners
- Hacker Tools Apk Download
- Easy Hack Tools
- Pentest Tools Online
- Install Pentest Tools Ubuntu
- Top Pentest Tools
- Pentest Tools Apk
- Pentest Tools List
- Best Pentesting Tools 2018
- Hack Tools Github
- New Hacker Tools
- New Hacker Tools
- Hacking Tools And Software
- Pentest Tools Windows
- Bluetooth Hacking Tools Kali
- Growth Hacker Tools
- Nsa Hack Tools
- Github Hacking Tools
- Pentest Tools Alternative
- Hacking Tools Free Download
- How To Install Pentest Tools In Ubuntu
- Hacking Tools For Windows Free Download
- Bluetooth Hacking Tools Kali
- Physical Pentest Tools
- Hacker Tools 2020
- Pentest Recon Tools
- Hack Rom Tools
- What Are Hacking Tools
- Black Hat Hacker Tools
- Pentest Tools Download
- Hacking Tools Usb
- Pentest Tools Nmap
- Free Pentest Tools For Windows
- Pentest Tools For Ubuntu
- Hacker Tools Github
- Hack And Tools
- Tools 4 Hack
- Hacking Tools For Windows 7
- Hacking Tools For Windows Free Download
- Hack Tools 2019
- Hacker Techniques Tools And Incident Handling
- Underground Hacker Sites
- Nsa Hacker Tools
- Hacks And Tools
- Pentest Tools Open Source
- Pentest Tools Free
- Pentest Automation Tools
- Nsa Hacker Tools
- Hacking Tools Kit
- Hack Tools For Mac
- Termux Hacking Tools 2019
- Best Hacking Tools 2020
- Hacker Tools Free Download
- Hacker Tools
- Pentest Tools Kali Linux
- Hack And Tools
- How To Install Pentest Tools In Ubuntu
- Best Hacking Tools 2019
- Black Hat Hacker Tools
- Pentest Tools Open Source
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Alternative
No comments:
Post a Comment