# Copyright (c) 2014-present Maltrail developers (https://github.com/stamparm/trails/)
# See the file 'LICENSE.md' for copying permission

# Reference: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt
# Reference: https://app.any.run/tasks/1d916a76-60e3-40c7-a1e2-9777d759b587/

iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com

# Reference: https://www.ncsc.gov.uk/guidance/ransomware-guidance-enterprise-administrators

ifferfsodp9ifjaposdfjhgosurijfaewrwergwea.com

# Reference: https://www.virustotal.com/en/file/7b7aa67a3d47cb39d46ed556b220a7a55e357d2a9759f0c1dcbacc72735aabb1/analysis/

iuqssfsodp9ifjaposdfjhgosurijfaewrwergwea.com

# Reference: https://www.citiustech.com/uploads/article/pdf/wannacry-ransomware---time-to-power-up-your-infrastructure-and-bolster-your-secu-105.pdf
# Reference: https://gist.github.com/rain-1/8ec5d7df901e897bdac4052d615d20f1

ofdwcjnko.us
peuwdchnvn.us
pvbeqjbqrslnkmashlsxb.us
pxyhybnyv.us
qkkftmpy.us
rkhlkmpfpoqxmlqmkf.us
ryitsfeogisr.us
srwcjdfrtnhnjekjerl.us
bqkv73uv72t.com
wwld4ztvwurz4.com
bqmvdaew.net
thstlufnunxaksr.us
udrgtaxgdyv.us
w5q7spejg96n.com
xmqlcikldft.us
yobvyjmjbsgdfqnh.us
yrwgugricfklb.us
ywpvqhlqnssecpdemq.us
43bwabxrduicndiocpo.net
dyc5m6xx36kxj.net
76jdd2ir2embyv47.onion
gurj5i6cvyi.net
bcbnprjwry2.net
quvdaew.net
sxdcmuaSae7saa2.net
rbacrbyq2czpwn15.net
ow24dthuhwx6uj.net
fa3e7yyp7slwb2.com
bqu73uv72t.com
xanznp2kq.com
chy4j2eqieccuk.com
lkry2vwbd.com
ju2ymymh4zlsk.com
graficagbin.com.br
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
sdhjjekfp4k.com
cwwnhwhlz52ma.onion
gx7ekbenv2riucmf.onion
xxlvbrloxvriy2c5.onion
57g7spgrzlojinas.onion

# Reference: https://trapx.com/wannacry-thoughts-and-threat-intelligence/

dyc5m6xx36kxj.net
ofdwcjnko.us
gurj5i6cvyi.net
gurj5i6cvyi.net
peuwdchnvn.us
bcbnprjwry2.net
agrdwrtj.us
pvbeqjbqrslnkmashlsxb.us
quvdaew.net
bctxawdt.us
pxyhybnyv.us
sxdcmuaSae7saa2.net
cokfqwjmferc.us
qkkftmpy.us
cxbenjiikmhjcerbj.us
rkhlkmpfpoqxmlqmkf.us
ow24dthuhwx6uj.net
depuisgef.us
ryitsfeogisr.us
fa3e7yyp7slwb2.com
edoknehyvbl.us
srwcjdfrtnhnjekjerl.us
enyeikruptiukjorq.com
bqkv73uv72t.com
bqu73uv72t.com
frullndjtkojlu.us
wwld4ztvwurz4.com
xanznp2kq.com
gcidpiuvamynj.us
bqmvdaew.net
chy4j2eqieccuk.com
gxrytjoclpvv.us
thstlufnunxaksr.us
lkry2vwbd.com
hanoluexjqcf.us
udrgtaxgdyv.us
ju2ymymh4zlsk.com
iarirjjrnuornts.us
w5q7spejg96n.com
graficagbin.com.br
ifbjoosjqhaeqjjwaerri.us
xmqlcikldft.us
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
iouenviwrc.us
yobvyjmjbsgdfqnh.us
sdhjjekfp4k.com
kuuelejkfwk.us
yrwgugricfklb.us
cwwnhwhlz52ma.onion
lkbsxkitgxttgaobxu.us
ywpvqhlqnssecpdemq.us
gx7ekbenv2riucmf.onion
nnnlafqfnrbynwor.us
43bwabxrduicndiocpo.net
xxlvbrloxvriy2c5.onion
ns768.com
dyc5m6xx36kxj.net
57g7spgrzlojinas.onion
76jdd2ir2embyv47.onion

# Reference: https://www.ey.com/Publication/vwLUAssets/ey-wannacry-ransomware-attack/$File/ey-wannacry-ransomware-attack.pdf

gx7ekbenv2riucmf.onion
iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea.com
57g7spgrzlojinas.onion
easysupport.us
bctxawdt.us
w5q7spejg96n.com
nnnlafqfnrbynwor.us
lkbsxkitgxttgaobxu.us
depuisgef.us
gxrytjoclpvv.us
peuwdchnvn.us
frullndjtkojlu.us
iouenviwrc.us
gcidpiuvamynj.us
kuuelejkfwk.us
xmqlcikldft.us
pvbeqjbqrslnkmashlsxb.us
pxyhybnyv.us
enyeikruptiukjorq.com
cokfqwjmferc.us
yobvyjmjbsgdfqnh.us
rkhlkmpfpoqxmlqmkf.us
yrwgugricfklb.us
cxbenjiikmhjcerbj.us
srwcjdfrtnhnjekjerl.us
ryitsfeogisr.us
hanoluexjqcf.us
udrgtaxgdyv.us
thstlufnunxaksr.us
iarirjjrnuornts.us
ns768.com
ywpvqhlqnssecpdemq.us
ifbjoosjqhaeqjjwaerri.us
qkkftmpy.us
agrdwrtj.us
ofdwcjnko.us
edoknehyvbl.us
000o9jtv2.ru
yio3lvx.com
lfsjkad.net
jktew0.com
882ybcdzjwi1.ru