Read More: Part 1 — Part 2 — Part 3 — Part 4 Code similarities are shared between a February 2017 sample of WannaCry and 2015 Contopee sample (previously attributed last year to Lazarus Group by Symantec) had been found. Appendix 2 — Identical arrays shared by the two functions in Appendix 1.