Advertisement
Guest User

New WCry variant WCR.PY log

a guest
May 15th, 2017
2,600
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.38 KB | None | 0 0
  1. [+] got inner loader
  2. ('[*] possible configuration file', 'c.wnry')
  3. ('[+] bitcoin address', '115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn')
  4. ('[+] bitcoin address', '12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw')
  5. ('[+] bitcoin address', '13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94')
  6. ('[+] Mutex', 'Global\\MsWinZonesCacheCounterMutexA')
  7. ('[*] possible configuration file', 't.wnry')
  8. ('[+] zip password', 'WNcry@2ol7')
  9. ('[+] Configuration file', 'c.wnry')
  10. [+] payment sites:
  11.  
  12. gx7ekbenv2riucmf.onion
  13. 57g7spgrzlojinas.onion
  14. xxlvbrloxvriy2c5.onion
  15. 76jdd2ir2embyv47.onion
  16. cwwnhwhlz52maqm7.onion
  17.  
  18. [+] 1st Embeded RSA key
  19. -----BEGIN RSA PRIVATE KEY-----
  20. MIIEowIBAAKCAQEA78/ugwt625HxsMjdYDbPTYXyZDaczACEUe2WIP8epL7cZnLH
  21. 1gN03qMoBlvJUqUn+d/8D4RFYG2BhFWwXkyP98zWbRGx5MgkqO6h8mEKElmyamw6
  22. hWd2kYxQJ1wGl2RpAzeWSOWWq9eo8NF3MC3TE6Cjn83+kd+GCoyfCoj1TrhdAjoJ
  23. YTyxDE9niR2PN4DJiTYByZzBbA3VXohkvo1xvBtjAWAYsQKCwqqbgt7EaAqTkMr2
  24. iSieJxNfBdZSHW0lcUNuq/vjr+fxEyEuPxOdcDv9atUUqxwYYYBbd7bJg/a0WAVW
  25. J7Dse1HnFfRQGs7h76ky7V/aHp/ZCpwEK00rQwIDAQABAoIBAQDHi+j2yCWp8Q4A
  26. wZNbzR/AbTXd54efRMrV9XGX8VGJWnvBD79zOJsV6wOSDuw9xcm25YczTigAbf54
  27. pGjGfsTJOHwwc6noKhY/L5o4OkEMNfD9FyO2//mscOn9Zljhvp6XG7kE3W37fc9I
  28. 27NmtqrNyTx97AXpUeqSeqKYPJCKt8fg8ExsNF2WxQQK4IAl7Qv54QXmWxY2hjXX
  29. loUCsMkead5s1mDX8LDjs4ncs5yknb+ihqYOyOIbUS+kaQX8PR6BTmKT/fFfq1aJ
  30. MzVibgZ5XKXgcgAiqn8V+TzGW1lyCc/aoMAQ7acPAmsCNhycKr8dKO/KS6oyyUHS
  31. qxgqizUxAoGBAPtOA5SPOMiNuCahzYL2sfu0YUCvQJ8jfmzYOWzWBsNc7Csb++wM
  32. ZU4XPRyQiNRIJF68zWS5eUs2bNnJ4D0g54utMGbkNT2zLo3fXZMwSOg0zJPfbQvm
  33. iriyLQhC5MQ8+RzhQJxkSAVMitZfta+YDL5JW/N4rwK+DvnZhq7aEtcZAoGBAPRK
  34. 8wFjJM/ux5Lsujw1je64gUnwO3yBzUFfztYj9U5B89NTEoMTLcyFvTCuLOcPAvop
  35. K03uzenKA569poTzkbQ7ITGnF1C5e5zk18soielY/swNMECqasSlLeqfH+bXduLe
  36. PCmBeTYjtyCwTj8BtR2bvTWtISXf++f3Rt1eF+y7AoGATbUE5GYZD+LKo596tdlk
  37. lclkHSVT3SGTkUKXFzFjK/vKx1XC42290ZTb/74toT6hiG3nMRMtD3XH2NxUq3JG
  38. RumJwvckA20poxMDk2Tl1m+lJsB6rqheEth9lkVhCdE00ppQaUuU/ZZ6g+lae+6P
  39. WjPC7BlQPI/af6WkwOKL2tkCgYB6RmV5hUlwtmC4Xrsc1eVz3nAANTlhKYs2NKFP
  40. t/HZuNM1LDhw2RGsdChtDFE3WeEwm5isSmJQqafENcL6evusDYig1LSr2BtSPYzx
  41. iBn3bW8jbVqAk4wbX14rOHh8T86W4YuVbtPf0GKh/v07NjyUVFaRXlXgIktxIOkc
  42. djNdbwKBgC4lfX58x0TPtJa7IJBjZpeB4h9/DWI+8QUBOvG6hVn9tOmba/9EtiVd
  43. nDxZv8juwjfv+BuTvhR6ldPT/0BnI43hgFp5/voKGysudzhYLl8tTy8yyn3i7EOd
  44. qi2muTyxrZOCndxTmhbOKFnSiaeHuT34RY5Vd/xtQEOEBRLM1oGU
  45. -----END RSA PRIVATE KEY-----
  46. ('[+] saving inner zip as', 'inner.5873c1b5b246c80ab88172d3294140a83d711cd64520a0c7dd7837f028146b80.zip')
  47. [+] embeded keys:
  48. -----BEGIN PUBLIC KEY-----
  49. MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvEYvi7+kQ/7ua33SjCd
  50. zyg8RtXiK2DNkmkRMJ3l+zvZcqHe5d+OQidogRfmQVBycfjcMurhm3CIphLLdSby
  51. ONtO2ejKH9TqBwugddDXDANiLadGIJYAKK+9F8HYMCz1ZdL1tTa70p9uW8Y5OqOe
  52. rWtZrX2llE1h8tpAetq/Z33yGyYLe3t0kTHtKSPLYim5UkxgmJ9+xXmGxbhlrn+u
  53. cR0KS6x0YwlsJHAXsXAAddrI5PtnsVu+HPgE9h3BvloIV6fjJ6MdvlEr26//8yut
  54. e7HCkxiRgJCsQZ6yJ6Lxf1WSBPd8j41wajSCEx6S1Nfabc3AXaiV9Cos3kaEO0yX
  55. dQIDAQAB
  56. -----END PUBLIC KEY-----
  57. -----BEGIN PUBLIC KEY-----
  58. MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78/ugwt625HxsMjdYDbP
  59. TYXyZDaczACEUe2WIP8epL7cZnLH1gN03qMoBlvJUqUn+d/8D4RFYG2BhFWwXkyP
  60. 98zWbRGx5MgkqO6h8mEKElmyamw6hWd2kYxQJ1wGl2RpAzeWSOWWq9eo8NF3MC3T
  61. E6Cjn83+kd+GCoyfCoj1TrhdAjoJYTyxDE9niR2PN4DJiTYByZzBbA3VXohkvo1x
  62. vBtjAWAYsQKCwqqbgt7EaAqTkMr2iSieJxNfBdZSHW0lcUNuq/vjr+fxEyEuPxOd
  63. cDv9atUUqxwYYYBbd7bJg/a0WAVWJ7Dse1HnFfRQGs7h76ky7V/aHp/ZCpwEK00r
  64. QwIDAQAB
  65. -----END PUBLIC KEY-----
  66. ('[+] saving core dll as', 'core.1be0b96d502c268cb40da97a16952d89674a9329cb60bac81a96e01cf7356830.dll')
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement