EternalRocks worm

Forum for analysis and discussion about malware.
Post Reply
Antelox
Posts: 179
Joined: Sun Mar 21, 2010 10:38 pm
Contact:

EternalRocks worm

Post by Antelox » Thu May 18, 2017 4:56 pm

EternalRocks is a network worm (i.e. self-replicating), emerged in first half of May 2017. It spreads through public (The Shadow Brokers NSA dump) SMB exploits: ETERNALBLUE, ETERNALCHAMPION, ETERNALROMANCE and ETERNALSYNERGY, along with related programs: DOUBLEPULSAR, ARCHITOUCH and SMBTOUCH.
https://github.com/stamparm/EternalRocks

Samples: https://github.com/stamparm/EternalRock ... er/samples

BR,

Antelox

Post Reply