Content available in original language
class="post-article">
Ransomware C Active since 2017

WannaCry2

WannaCry WannaCrypt 2017 Kuzey Kore Lazarus. EternalBlue MS17-010. Kill switch iuqerfsodp9. 150 ulke 230K sistem. NHS FedEx.

Threat Profile
Type Ransomware
Programming LanguageC
C2 ProtocolTCP/SMB
First Seen2017
Targets Küresel
Purpose / Capabilities
  • Ransomware+Worm

C2 Servers 1

Address Port Protocol Status Action
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com
80 HTTP SINKHOLED

⚠ C2 addresses are shared solely for threat intelligence and defensive purposes. Unauthorized access to these addresses constitutes a criminal offense.

Research Reports (1)

Kritik

WannaCry -- iuqerfsodp9...com Kill Switch Domain, MsWinZonesCacheCounterMutexA, 2 BTC | Kritik

WannaCry 743KB. iuqerfsodp9ifjaposdfjhgosurijfaewrwergwff.com kill switch. Global\MsWinZonesCacheCounterMutexA mutex. 115p7UMM BTC.

Read Report →