Ʈ(Petya) Ǻ
ۼ 2017-06-28
ȸ : 11,397
ũ(WannaCry) ̾ Ʈ(Petya) 踦 Ÿ ̴. 150 , , ǻ ʸ븦 Ų ذ ġ ʼ̴. ؾ ұ.
Ʈߴ ũó (SMB) ó ڵ(ͽ÷) ͳκ(EternalBlue) ǿ Ȯǰ ִ. ũμƮ(MS) ̹ 3 ڵ ǿǴ SMB ġ Ʈ(MS17-010) ߴ
Ʈ ظ ϱ ⺻ ġ Ʈ ϴ ȴ. OS Ʈ ġ ġϰ ־ų, ũ Ȯ ʱ ü(OS) ش Ʈ ġ ȯ ̹ Ϻκ ̴.
ٸ SMB ġδ ʴ. Ʈ߰ Ȯ ɷ ũ̺ پϱ ̴. ε ̹ Ʈ 'Ŀ' 27(ð) SMB Ʈ ý۵ Ʈ ظ Ծٰ ߴ.
ο ̹Ⱦü Fť ְå(CRO) Ʈߴ ֽ ġ ý۵ ų ִ. Ǽڵ尡 Ÿ ý ų SMB Ӿƴ϶ 'WMIC' 'PSexec' ý ϱ ̴
SMB ġ WMIC ʵ ϴ ٰ ߴ. WMIC ' ŴƮ νƮ̼(WMI)'̶ ý ٷ ְ ̽. Ŀ WMI ߴ WMIC θ ִ.
MS Ʈũ(MSDN) WMI ߴ ִ ȳϰ ִ. Ʈ 'net stop winmgmt' ϸ ȴ. ٸ SMSƮȣƮ ȭ WMI ϴ ٸ ȴ.
ý ǵ帮 ʰ Ʈ ִ ߰ߵƴ. PTťƼ, ̱ ̹, ͽŬúƮ Ҽ ȿڵ ؼ. ǻ ڰ 'C:windows' ο 'perfc' Ǵ 'perfc.dat'̶ ̸ ȴٴ ̴.
Ϻ ȿڵ ߰ Ʈ 'ųġ' . OS ο Ʈ ߰ ϴ ϰ б Ӽ ϴ ɾ.
̸ Ϸ Ʈ 3 Է϶ ߴ. ù° 'rem. > %windir%perfc' Է . ° 'rem. > %windir%perfc.dat' Է . 'attrib +R %windir%perfc.*' Է . ǥ(') ܴ.
ڵ Ʈ ý OS ξȿ perfc ̸ ϸ Ǽ ߴϴ ľǵƴ. ý ȣȭϰų ٸ ǻͷ ĸ õ ʴ´ٴ . ̷ ' ųġ' Ҹ ִ.
Ʈ Ȯ ʱε ȸϴ ֱ ̻ 100% ȿ Ѵٰ . Ϲ Ĵ, ʿ ɼ ο ΰ ̸ ֿ ϰ ϰ ϰ ؾ ʿ䰡 ִ.