Resubmissions
22/11/2025, 17:35
251122-v57jgsbn8x1022/11/2025, 17:26
251122-vz93esbn4z22/11/2025, 17:15
251122-vsrmhabm4v1022/11/2025, 17:02
251122-vkblbavldp1022/11/2025, 16:57
251122-vggyxsvkgr1022/11/2025, 16:49
251122-vb6ebsbk511022/11/2025, 13:45
251122-q2m88aaj4t1021/11/2025, 21:15
251121-z4cpyagj3w12/11/2025, 03:22
251112-dw9ttaxrgx10Analysis
- max time kernel
298s - max time network
305s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
- submitted
22/11/2025, 16:49
General
- Target Malware-1-master/eternalblue.exe
- Size 886KB
- Sample251122-vb6ebsbk51
- SHA256 7f5f447fe870449a8245e7abc19b9f4071095e02813d5f42c622add56da15b8b
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Malware-1-master\eternalblue.exe"C:\Users\Admin\AppData\Local\Temp\Malware-1-master\eternalblue.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3728-0-0x00000000008F0000-0x00000000009D2000-memory.dmp
memory/3728-1-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-2-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-3-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-4-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-5-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-6-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-7-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-8-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-9-0x000000001CD70000-0x000000001CD80000-memory.dmp
memory/3728-10-0x000000001CD70000-0x000000001CD80000-memory.dmp