PC Matic Blog

WanaCrypt0r Analysis Part II – SMB Exploit and Worm Component

PC Matic Malware Research / June 1, 2017

Introduction Part II of the WanaCrypt0r code analysis has arrived. We’re going to be starting out where we left off last time, which is with the Microsoft Windows MS17-010 Server Message Block (SMB) exploit/”worm component” that made the ransomware so dangerous by allowing it to spread to other vulnerable (not patched) systems on the network […]

WanaCrypt0r Analysis Part II – SMB Exploit and Worm Component Read More »

WanaCrypt0r – A dive into the code

Introduction During the past few days, as one might expect, we’ve been getting lots of news, reports, and files for the ransomware entitled WanaCrypt0r/WannaCry/WanaCrypt. First and foremost, the good news is that customers of PC Matic SuperShield were protected from WanaCrypt0r the entire time. However, this post aims to provide a technical analysis of how

wanacrypt0r

WanaCrypt0r Analysis Part II – SMB Exploit and Worm Component

WanaCrypt0r – A dive into the code