A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #30367  by Antelox
 Thu May 18, 2017 4:56 pm
EternalRocks is a network worm (i.e. self-replicating), emerged in first half of May 2017. It spreads through public (The Shadow Brokers NSA dump) SMB exploits: ETERNALBLUE, ETERNALCHAMPION, ETERNALROMANCE and ETERNALSYNERGY, along with related programs: DOUBLEPULSAR, ARCHITOUCH and SMBTOUCH.
https://github.com/stamparm/EternalRocks

Samples: https://github.com/stamparm/EternalRock ... er/samples

BR,

Antelox