Thursday, August 27, 2020

Pcap Of Wannacry Spreading Using EthernalBlue

Saw that a lot of people were looking for a pcap with WannaCry spreading Using EthernalBlue.

I have put together a little "petri dish" test environment and started looking for a sample that has the exploit. Some samples out there simply do not have the exploit code, and even tough they will encrypt the files locally, sometimes the mounted shares too, they would not spread.

Luckily, I have found this nice blog post from McAfee Labs: https://securingtomorrow.mcafee.com/mcafee-labs/analysis-wannacry-ransomware/ with the reference to the sample SHA256: 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c (they keep referring to samples with MD5, which is still a very-very bad practice, but the hash is MD5: DB349B97C37D22F5EA1D1841E3C89EB4)

Once I got the sample from the VxStream Sandbox site, dropped it in the test environment, and monitored it with Security Onion. I was super happy to see it spreading, despite the fact that for the first run my Windows 7 x64 VM went to BSOD as the EthernalBlue exploit failed.

But the second run was a full success, all my Windows 7 VMs got infected. Brad was so kind and made a guest blog post at one of my favorite sites, www.malware-traffic-analysis.net so you can find the pcap, description of the test environment and some screenshots here: http://malware-traffic-analysis.net/2017/05/18/index2.html

More information


  1. Hack Tools For Games
  2. Hacker Security Tools
  3. Bluetooth Hacking Tools Kali
  4. Hack Tools For Pc
  5. Usb Pentest Tools
  6. Pentest Tools Website
  7. Pentest Tools Review
  8. Hack Tools
  9. Pentest Tools Find Subdomains
  10. Hack Website Online Tool
  11. Hacker Tools 2020
  12. Pentest Tools Kali Linux
  13. Hacks And Tools
  14. Pentest Tools Android
  15. Hack And Tools
  16. New Hack Tools
  17. What Are Hacking Tools
  18. Hacking Tools Online
  19. Ethical Hacker Tools
  20. Pentest Tools Online
  21. Nsa Hacker Tools
  22. Hacking Tools Download
  23. World No 1 Hacker Software
  24. World No 1 Hacker Software
  25. Hacks And Tools
  26. Pentest Tools Subdomain
  27. Hacker
  28. Hacker Tools Free Download
  29. Hacker Tools Online
  30. Tools For Hacker
  31. Hacking Tools Windows
  32. Pentest Tools Url Fuzzer
  33. Hacker Hardware Tools
  34. Hacker Search Tools
  35. Tools 4 Hack
  36. Pentest Tools Framework
  37. New Hack Tools
  38. Hacking Tools For Windows Free Download
  39. Hacking Tools Mac
  40. Tools 4 Hack
  41. Pentest Tools Framework
  42. Best Hacking Tools 2019
  43. Pentest Tools For Ubuntu
  44. Hacker Tools Free Download
  45. Usb Pentest Tools
  46. Hacker Tools Online
  47. Bluetooth Hacking Tools Kali
  48. Install Pentest Tools Ubuntu
  49. Pentest Tools Find Subdomains
  50. Best Pentesting Tools 2018
  51. Hack Tools Github
  52. Blackhat Hacker Tools
  53. Hacking Tools For Windows 7
  54. Pentest Tools Linux
  55. Ethical Hacker Tools
  56. Hacking Tools Hardware
  57. Computer Hacker
  58. Hack Tools For Games
  59. Beginner Hacker Tools
  60. Github Hacking Tools
  61. Pentest Reporting Tools
  62. Hack Apps
  63. Hacking Tools Windows
  64. Tools For Hacker
  65. Hack Tool Apk No Root
  66. Pentest Tools Url Fuzzer
  67. Hacker
  68. Game Hacking
  69. Hack Tools For Games
  70. Pentest Reporting Tools
  71. Hack Tools For Pc
  72. Pentest Tools For Ubuntu
  73. Nsa Hack Tools
  74. Hacker Hardware Tools
  75. Game Hacking
  76. Hacker Tools For Windows
  77. Pentest Tools Website Vulnerability
  78. Hacking Tools Windows 10
  79. Pentest Tools For Ubuntu
  80. Hack Tool Apk
  81. Pentest Tools
  82. Easy Hack Tools
  83. Hacking Tools 2020
  84. Hacker Tools List
  85. Hacker Tools Free Download
  86. Usb Pentest Tools
  87. Hacking Tools Hardware
  88. Hacking Tools For Windows Free Download
  89. Hacker Tools For Mac
  90. Blackhat Hacker Tools
  91. Hacker Tools For Pc
  92. What Is Hacking Tools
  93. Hacker Tools Free
  94. Beginner Hacker Tools
  95. Hacker Tools Github
  96. Tools For Hacker
  97. Hacker Tools 2019
  98. New Hacker Tools
  99. Pentest Tools Nmap
  100. Hack Tools For Windows

No comments:

Post a Comment