Skip to content

Instantly share code, notes, and snippets.

@Blevene
Created May 12, 2017 15:00
Show Gist options
  • Save Blevene/2ef2b808a114722e5061297a5897a710 to your computer and use it in GitHub Desktop.
Save Blevene/2ef2b808a114722e5061297a5897a710 to your computer and use it in GitHub Desktop.
Wcry/WannaCryptor 2.0 Hashes
4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c
b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
@Blevene
Copy link
Author

Blevene commented May 12, 2017

WanaCrypt0r, pardon the typo

@Blevene
Copy link
Author

Blevene commented May 12, 2017

wcry small:
hash1 = "b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25"
hash2 = "4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79"
wcry big:
hash1 = "24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c"
hash2 = "ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa"

@Blevene
Copy link
Author

Blevene commented May 12, 2017

It looks like what I have labeled "Small" is actually a component which runs after encryption and not a dropper.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment