FAQ on the WanaCry ransomware outbreak
Tags
attack-pattern: Data Control Panel - T1218.002 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID e50bbf92-1f12-43bf-9054-65a54459b878
Fingerprint 94b038d61cf7d7c7
Analysis status DONE
Considered CTI value 0
Text language
Published May 13, 2017, 6:10 p.m.
Added to db Jan. 18, 2023, 8:28 p.m.
Last updated Nov. 17, 2024, 6:32 p.m.
Headline FAQ on the WanaCry ransomware outbreak
Title FAQ on the WanaCry ransomware outbreak
Detected Hints/Tags/Attributes 52/1/7
Source URLs
Redirection Url
Details Source https://blog.fox-it.com/2017/05/13/faq-on-the-wanacry-ransomware-outbreak/
URL Provider
Details Provider Source level domain
Details fox-it.com blog.fox-it.com
Attributes
Details Type #Events CTI Value
Details Domain 12 
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Details Domain 4 
ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com
Details File 27 
tasksche.exe
Details Microsoft Patch Numbers 7 
KB4012598
Details Windows Registry Key 41 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Details Windows Registry Key 2 
HKLM\SOFTWARE\WanaCrypt0r\wd
Details Windows Registry Key 37 
HKCU\Control