W(wng)ӍͨӍT Pһδƽһ“֮{(ln)”^(gu)ȥãһN̖(ho)“petya”_(ki)ʼŰ(j)Ϥ“petya”l(f)u˶_˹Ӣ(gu)mȶ(g)(gu)²׃NĂٶ_(d)ÿ10犸Ⱦ5000_(ti)X
\(yn)I(yng)ʯ˾C(j)(chng)ATMC(j)I(y)O(sh)ʩѴSĿǰ(gu)(ni)ҲF(xin)˲E_J(rn)ԓӱʽcǰWannaCryһ֮{(ln)(EternalBlue)©(du)ͨ
(du)ϵy(tng)Ɖ
ᘌ(du)˲W(wng)hȡ¾oʩ
1(j)Xܛ(du)XM(jn)ȫP隢;
2r(sh)windowsϵy(tng)a(b)䃼ַ:
rtfa(b)d:https://portal.msrc.microsoft.com/en-US/eula
SMBa(b)d:https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
3 Ҫpc(din)rtfdocȸʽ
4 ^m(x)־W(wng)j(lu)O(sh)445135139˿ڷ]B(ti)
5 (ni)W(wng)дʹͬ~̖(ho)ܴaręC(j)Ո(qng)Mܴaδ_(ki)C(j)XՈ(qng)_J(rn)ꮅa(b)bɺM(jn)(lin)W(wng)
6P(gun)]TCP 135˿:hڷRr(sh)P(gun)]TCP 135˿ƲО
7ֹͣ(w)WMI(w):WMI(Windows Management Instrumentation Windows Ҏ(gu))һ(xing)ĵ Windows g(sh)ͨ^(gu)·ֹͣ:
ڷ(w)(y)_(ki)WMI(w)_(ki)ʼ-\(yn)ݔservices.mscM(jn)(w)ڿ鿴ʽxD(bio)xڹp(w)ڷ(w)(y)WҵWMI(w)ҵpֱc(din)ֹͣ(w)
627“petya”Xl(f)Ѯ(yng)h־W(wng)(du)һr(sh)gþW(wng)j(lu)ȫ(yng)A(y)(yng)(du)“petya”l(f)oָ֪ͨ(do)ȫhc(din)λbϵy(tng)a(b)(j)ܛ⣬Ѯ(yng)ƽ_(ti)l(f)(yng)(du)“”ľo֪ͨяVȺ÷̎M(jn)24Сr(sh)(yn)ܱO(jin)y(c)(dng)B(ti)
Ѯ(yng)W(wng)ѣՈ(qng)VW(wng)Ma(b)ѸȾC(j)Ո(qng)W(wng)M(jn)һȾܲՈ(qng)r(sh)cW(wng)T(lin)ϵ֧H