What is WannaCry?
-WannaCry is a You do not have permission to view the full content of this post. Log in or register now. You do not have permission to view the full content of this post. Log in or register now., which targeted computers running the You do not have permission to view the full content of this post. Log in or register now. You do not have permission to view the full content of this post. Log in or register now. by encrypting (locking) data and demanding ransom payments in the You do not have permission to view the full content of this post. Log in or register now. You do not have permission to view the full content of this post. Log in or register now.. The worm is also known as WannaCrypt,You do not have permission to view the full content of this post. Log in or register now. Wana Decrypt0r 2.0,You do not have permission to view the full content of this post. Log in or register now. WanaCrypt0r 2.0,You do not have permission to view the full content of this post. Log in or register now. and Wanna Decryptor.You do not have permission to view the full content of this post. Log in or register now. It is considered a network worm because it also includes a transport mechanism to automatically spread itself. This transport code scans for vulnerable systems, then uses the You do not have permission to view the full content of this post. Log in or register now. exploit to gain access, and the You do not have permission to view the full content of this post. Log in or register now. tool to install and execute a copy of itself.You do not have permission to view the full content of this post. Log in or register now. WannaCry versions 0, 1, and 2 were created using You do not have permission to view the full content of this post. Log in or register now..
Infection Demo
Execution:
-WannaCry has the ability to spread itself within corporate networks without user interaction, by exploiting known vulnerabilities in Microsoft Windows. Computers that do not have the latest Windows security updates applied are at risk of infection
Special Malicious Code:
*WannaCry Contains Computer Worm Which Means This Ransomware Can Spread Without Human Interaction.
What is difference between Virus And Worm?
*Virus-Virus Is A Common Type Of Malware In order To Spread This needs An intentionally Action And needs An Human Interaction.
*Computer Worm-This Little Sh*t Can Spread Without Human Interaction And Can infect HID's Or Human Interface Devices...This Can Be Possible By Spreading through Email Of the victim...the Worm Searches Every Email Listed on the List And Automatically Send Some Random Bullsh*t On Every Single Email Listed On the List.
WannaCry Detections:
*Ad-Aware
Trojan.Ransom.WannaCryptor.J
AhnLab-V3
Trojan/Win32.FakeWanna.C1954223
Alibaba
Ransom:MSIL/Manna.b4ee0333
ALYac
Misc.Hoax
Antiy-AVL
Trojan/Generic.ASMalwS.2030C37
SecureAge APEX
Malicious
Arcabit
Trojan.Ransom.WannaCryptor.J
Avast
Win32:Malware-gen
AVG
Win32:Malware-gen
BitDefender
Trojan.Ransom.WannaCryptor.J
BitDefenderTheta
Gen:NN.ZemsilF.34790.Xm0@aKPHmtg
CAT-QuickHeal
Ransom.WannaCry.A3
Comodo
Malware@#1uuo5e2f1rb02
Cybereason
Malicious.258b8c
Cylance
Unsafe
Emsisoft
Trojan.FileCoder (A)
eScan
Trojan.Ransom.WannaCryptor.J
ESET-NOD32
A Variant Of MSIL/Hoax.FakeFilecoder.N
FireEye
Trojan.Ransom.WannaCryptor.J
Fortinet
MSIL/Filecoder.TA!tr
GData
MSIL.Application.FakeWannaCry.B
Gridinsoft
Ransom.Win32.Ransom.sa
Ikarus
Trojan-Ransom.WannaCry
Jiangmin
Trojan.MSIL.gdez
K7AntiVirus
Riskware ( 0040eff71 )
K7GW
Riskware ( 0040eff71 )
Kaspersky
Trojan-Ransom.MSIL.Manna.a
Lionic
Trojan.MSIL.Manna.j!c
Malwarebytes
Malware.AI.4264288958
MAX
Malware (ai Score=100)
MaxSecure
Trojan.Malware.300983.susgen
McAfee
Ransom-WannaCry!24F32DA258B8
McAfee-GW-Edition
Ransom-WannaCry!24F32DA258B8
Microsoft
Ransom:Win32/WannaCrypt
Etc.
Ps.No Computer Was Harmed in this Video...Except Mine
)
-If Ever yOu Got Ransomware Like this Check This Decryption Tool This Might Help you.
WannaCry Decryptor here:
You do not have permission to view the full content of this post. Log in or register now.
Decryptor Supported Extension:
If You have Any Question You Can Message Me.
Practice Cyber Security Now In Order To be protected by this Days.
-WannaCry is a You do not have permission to view the full content of this post. Log in or register now. You do not have permission to view the full content of this post. Log in or register now., which targeted computers running the You do not have permission to view the full content of this post. Log in or register now. You do not have permission to view the full content of this post. Log in or register now. by encrypting (locking) data and demanding ransom payments in the You do not have permission to view the full content of this post. Log in or register now. You do not have permission to view the full content of this post. Log in or register now.. The worm is also known as WannaCrypt,You do not have permission to view the full content of this post. Log in or register now. Wana Decrypt0r 2.0,You do not have permission to view the full content of this post. Log in or register now. WanaCrypt0r 2.0,You do not have permission to view the full content of this post. Log in or register now. and Wanna Decryptor.You do not have permission to view the full content of this post. Log in or register now. It is considered a network worm because it also includes a transport mechanism to automatically spread itself. This transport code scans for vulnerable systems, then uses the You do not have permission to view the full content of this post. Log in or register now. exploit to gain access, and the You do not have permission to view the full content of this post. Log in or register now. tool to install and execute a copy of itself.You do not have permission to view the full content of this post. Log in or register now. WannaCry versions 0, 1, and 2 were created using You do not have permission to view the full content of this post. Log in or register now..
Infection Demo
Execution:
-WannaCry has the ability to spread itself within corporate networks without user interaction, by exploiting known vulnerabilities in Microsoft Windows. Computers that do not have the latest Windows security updates applied are at risk of infection
Special Malicious Code:
*WannaCry Contains Computer Worm Which Means This Ransomware Can Spread Without Human Interaction.
What is difference between Virus And Worm?
*Virus-Virus Is A Common Type Of Malware In order To Spread This needs An intentionally Action And needs An Human Interaction.
*Computer Worm-This Little Sh*t Can Spread Without Human Interaction And Can infect HID's Or Human Interface Devices...This Can Be Possible By Spreading through Email Of the victim...the Worm Searches Every Email Listed on the List And Automatically Send Some Random Bullsh*t On Every Single Email Listed On the List.
WannaCry Detections:
*Ad-Aware
Trojan.Ransom.WannaCryptor.J
AhnLab-V3
Trojan/Win32.FakeWanna.C1954223
Alibaba
Ransom:MSIL/Manna.b4ee0333
ALYac
Misc.Hoax
Antiy-AVL
Trojan/Generic.ASMalwS.2030C37
SecureAge APEX
Malicious
Arcabit
Trojan.Ransom.WannaCryptor.J
Avast
Win32:Malware-gen
AVG
Win32:Malware-gen
BitDefender
Trojan.Ransom.WannaCryptor.J
BitDefenderTheta
Gen:NN.ZemsilF.34790.Xm0@aKPHmtg
CAT-QuickHeal
Ransom.WannaCry.A3
Comodo
Malware@#1uuo5e2f1rb02
Cybereason
Malicious.258b8c
Cylance
Unsafe
Emsisoft
Trojan.FileCoder (A)
eScan
Trojan.Ransom.WannaCryptor.J
ESET-NOD32
A Variant Of MSIL/Hoax.FakeFilecoder.N
FireEye
Trojan.Ransom.WannaCryptor.J
Fortinet
MSIL/Filecoder.TA!tr
GData
MSIL.Application.FakeWannaCry.B
Gridinsoft
Ransom.Win32.Ransom.sa
Ikarus
Trojan-Ransom.WannaCry
Jiangmin
Trojan.MSIL.gdez
K7AntiVirus
Riskware ( 0040eff71 )
K7GW
Riskware ( 0040eff71 )
Kaspersky
Trojan-Ransom.MSIL.Manna.a
Lionic
Trojan.MSIL.Manna.j!c
Malwarebytes
Malware.AI.4264288958
MAX
Malware (ai Score=100)
MaxSecure
Trojan.Malware.300983.susgen
McAfee
Ransom-WannaCry!24F32DA258B8
McAfee-GW-Edition
Ransom-WannaCry!24F32DA258B8
Microsoft
Ransom:Win32/WannaCrypt
Etc.
Ps.No Computer Was Harmed in this Video...Except Mine
)-If Ever yOu Got Ransomware Like this Check This Decryption Tool This Might Help you.
WannaCry Decryptor here:
You do not have permission to view the full content of this post. Log in or register now.
Decryptor Supported Extension:
| CryptXXX V1, V2, V3* | {original file name}.crypt, cryp1, crypz, or 5 hexadecimal characters |
| CryptXXX V4, V5 | {MD5 Hash}.5 hexadecimal characters |
| TeslaCrypt V1 | {original file name}.ECC |
| TeslaCrypt V2 | {original file name}.VVV, CCC, ZZZ, AAA, ABC, XYZ |
| TeslaCrypt V3 | {original file name}.XXX or TTT or MP3 or MICRO |
| TeslaCrypt V4 | File name and extension are unchanged |
| SNSLocker | {Original file name}.RSNSLocked |
| AutoLocky | {Original file name}.locky |
| BadBlock | {Original file name} |
| 777 | {Original file name}.777 |
| XORIST | {Original file name}.xorist or random extension |
| XORBAT | {Original file name}.crypted |
| CERBER V1 | {10 random characters}.cerber |
| Stampado | {Original file name}.locked |
| Nemucod | {Original file name}.crypted |
| Chimera | {Original file name}.crypt |
| LECHIFFRE | {Original file name}.LeChiffre |
| MirCop | Lock.{Original file name} |
| Jigsaw | {Original file name}.random extension |
| Globe/Purge | V1: {Original file name}.purge V2: {Original file name}.{email address + random characters} V3: Extension not fixed or file name encrypted |
| DXXD | V1: {Original file name}.{Original extension}dxxd |
| Teamxrat/Xpan | V2: {Original filename}.__xratteamLucked |
| Crysis | .{id}.{email address}.xtbl, .{id}.{email address}.crypt, .{id}.{email addres}.dharma, .{id}.{email address}.wallet |
| TeleCrypt | {Original file name} |
| DemoTool | .demoadc |
| WannaCry (WCRY) | {Original file name}.WNCRY, {Original file name}.WCRY |
Practice Cyber Security Now In Order To be protected by this Days.
Last edited: