Name: Rubayeem Hasan Alvi

Student ID: 22099921

My Malware Analysis and Review

Introduction
The world is connected with the internet. Here, cybersecurity threats
are the most common thing in this situation. Malicious Software
(Malware) is the most persistent and pervasive danger. This review
would discuss the characteristics and impact of an infamous malware
which is WannaCry(2017).
Question 1
WannaCry is a ransomware worm. Ransomeware encrypts files or locks users out
of their systems and demands payment in exchange of system access. That’s why
it’s called ransom. Ransomeware is different than other type of malware because
it demands payment and the threat of permanent data loss if the ransom is not
paid as their demand.

Question 2
Basic intention to make WannaCry was financial gain through the payment by the
blackmailing of worm affected users. Mainly, windows based operating systems
were affected by this Malware. Basically, the outdated versions of windows like
Windows 2003, Windows XP etc. This malware affected various sectors including
healthcare, finance and government agencies. Which demonstrates its
indiscriminate nature.

Question 3
WannaCry usually exploited a vulnerable portion of windows operating system
known as EternalBlue. This portion was designed by National Security
Agency(NSA) of the United States and this was leaked by a hacking group called
Shadow Brokers. A weakness in the SMB protocol was targeted by EternalBlue.
Which allowed remote code execution on vulnerable system without requiring any
user interaction. This portion helped WannaCry to get into other sections in
systems and exploited that part also.

Question 4
The outbreak of WannaCry had a devastating impact on individuals and
organizations. It’s rapid spread caused a widespread disruption. Its rapid impact
 Name: Rubayeem Hasan Alvi
Student ID: 22099921

affected hundreds of thousands of computers over 150 countries within days after
the initial outbreak. Many critical systems, including healthcare facilities and
government agencies were affected by the malware. This attack caused hundreds
of millions to billions of dollars in damages and lost productivity. In addition, this
attack questioned the trust of digital system and identified the importance of
cybersecurity.
In summary, WannaCry was a significant milestone in the evaluation of Malware
and demonstrating the potential for widespread disruption and financial gain
through the exploitation of vulnerabilities in widely used software. Its
combination of worm-like propagation and ransomware functionality made it a
formidable threat, highlighting the importance of proactive cybersecurity
measures and rapid response to emerging threats.

References:WannaCry (2017)
https://www.kaspersky.com.au/resource-center/threats/ransomware-wannacry