On why MalwareTech was the first to find the WannaCry killswitch – devit – Security analyst and incident responder with no time to blog
Tags
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002
Show in Graph
Common Information
Type Value
UUID bc16309d-94b0-47ef-be9b-d7c439af0704
Fingerprint 628c6d10f73369b
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 8, 2017, midnight
Added to db Jan. 18, 2023, 8:26 p.m.
Last updated Aug. 31, 2024, 11:11 p.m.
Headline devit
Title On why MalwareTech was the first to find the WannaCry killswitch – devit – Security analyst and incident responder with no time to blog
Detected Hints/Tags/Attributes 23/1/2
Source URLs
Redirection Url
Details Source https://blog.devit.co/on-wannacry-killswitch/
URL Provider
Details Provider Source level domain
Details devit.co blog.devit.co
Attributes
Details Type #Events CTI Value
Details sha256 1 
b9318a66fa7f50f2f3ecaca02a96268ad2c63db7554ea3acbde43bf517328d06
Details Url 1 
https://www.hybrid-analysis.com/sample/b9318a66fa7f50f2f3ecaca02a96268ad2c63db7554ea3acbde43bf517328d06?environmentid=100