Overview

overview

3

Static

static

1

EPSBehavio...zip.7z

windows7-x64

3

EPSBehavio...zip.7z

windows10-2004-x64

3

EPSBehavio...86.zip

windows7-x64

1

EPSBehavio...86.zip

windows10-2004-x64

1

DCM.xml

windows7-x64

1

DCM.xml

windows10-2004-x64

1

DigitalSign.xml

windows7-x64

1

DigitalSign.xml

windows10-2004-x64

1

EndpointSecurity.xml

windows7-x64

1

EndpointSecurity.xml

windows10-2004-x64

1

FILEWALL.xml

windows7-x64

1

FILEWALL.xml

windows10-2004-x64

1

Firewall.xml

windows7-x64

1

Firewall.xml

windows10-2004-x64

1

PrivilegeM...nt.xml

windows7-x64

1

PrivilegeM...nt.xml

windows10-2004-x64

1

Viguard.xml

windows7-x64

1

Viguard.xml

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    EPSBehavior_IVANTI-SEP_v386.zip.7z

  • Size

    3KB

  • Sample

    240709-ypn9rasepp

  • MD5

    c1ec92163d88a1a74bf6d40de8be4167

  • SHA1

    1b57986e767cf0c8c6610e239ef5c71daf1cddb9

  • SHA256

    a84e62a10c67743d549a9a2eb19c980e7bb4b3e5f786be2eb27485cf7e955e7e

  • SHA512

    61bea744bc78234039c324cacca8a4d647670820c2b0ee9d5d329a2e7610fef6d3f1f864a3e8decbe52701dfccb76a24427b4c37e1e7471193e029080219328f

Score
3/10

Malware Config

Targets

    • Target

      EPSBehavior_IVANTI-SEP_v386.zip.7z

    • Size

      3KB

    • MD5

      c1ec92163d88a1a74bf6d40de8be4167

    • SHA1

      1b57986e767cf0c8c6610e239ef5c71daf1cddb9

    • SHA256

      a84e62a10c67743d549a9a2eb19c980e7bb4b3e5f786be2eb27485cf7e955e7e

    • SHA512

      61bea744bc78234039c324cacca8a4d647670820c2b0ee9d5d329a2e7610fef6d3f1f864a3e8decbe52701dfccb76a24427b4c37e1e7471193e029080219328f

    Score
    3/10
    behavioral1behavioral2

    • Target

      EPSBehavior_IVANTI-SEP_v386.zip

    • Size

      3KB

    • MD5

      29dec57f9b6cb5292afc784b3e6a9fc1

    • SHA1

      7442bc0a2264ee94e72c5c5e7b62598361067963

    • SHA256

      a9dc9939b4f274d9dee908e3dab425048df79bd5092810643e621d4be039fc4b

    • SHA512

      07801ef59c8d25b8e5f69894952942317efaec40ce4e29112286fd273a8687f79c156c1f22fe4afec178715d8381ff403ddd78eff82ad0c84509f63ba17f54c3

    Score
    1/10
    behavioral3behavioral4

    • Target

      DCM.xml

    • Size

      882B

    • MD5

      622b7e2375d2a9c5a0f0fbf41aea272b

    • SHA1

      0a88d99d106486a91f2fd910fb98a6bd3bf76f63

    • SHA256

      1656c221e43e380f136f6d074d4708262474e1d5c5049f0f140b52cd218a249a

    • SHA512

      7d70a8488721d12f1f2f2280d7b4bca94b3e652d0ae472ad1462fa7b2e0aa3a9b446c68c843d7be3f23093b92c334ba73f0b3cedf3debabdcc3458414dcd5643

    Score
    1/10
    behavioral5behavioral6

    • Target

      DigitalSign.xml

    • Size

      1KB

    • MD5

      8bc3910cb7cad6e46d5e108ff4e4695c

    • SHA1

      d2135547e6e8c203eb22bc04007358dd5ed5c3fa

    • SHA256

      e40411e08768970549c0df50f89c1c603e832bb4a3f307c6e0efb73c1ea34ea7

    • SHA512

      a136e701d99b435a6e2bb939ed3d67af9614374eca29cb56f107fac2d6d390e507ced824e65711ffd394d1e7bff47734f52c4d1b2f3090c00f5bac9eed625dee

    Score
    1/10
    behavioral7behavioral8

    • Target

      EndpointSecurity.xml

    • Size

      355B

    • MD5

      ec1ca288144db9056f43bc2e57163075

    • SHA1

      91fe8c335a98f7c3457515c5af14ed2a019e541a

    • SHA256

      8a2da3410f1cdd4fc6c01e146f6cea2fccdf22fff14d2c06043307a61441d83f

    • SHA512

      bec3dc7655615fa4e7e6c4a26da02e31d801480807db31ceb588df2b2e6855e827ddc7f25168a5dd40250349a57ce7cf39fdfa464f648305addb1c00fd112e0a

    Score
    1/10
    behavioral10behavioral9

    • Target

      FILEWALL.XML

    • Size

      1KB

    • MD5

      dfb488d339609c15057342621ce6b57a

    • SHA1

      b3841c9cb82920087e8f6b2392fe642a2d843391

    • SHA256

      20c7f7c3040d5818ac3d964d1fe35c01f52b0312a35f6345e6468f16d891540b

    • SHA512

      744047f8e6d2fc10ca108bf108e6297f0d193412118d81037c62422a7ff188182f497957efc589cc5ef7cfab33ba964ef2813d55c55d9ec364f41b226cdbef41

    Score
    1/10
    behavioral11behavioral12

    • Target

      Firewall.xml

    • Size

      521B

    • MD5

      146d7af12e12a8039dad01c9d53ca659

    • SHA1

      6e868b5b3f1d7adb18bc253bf67600c62f1688b0

    • SHA256

      f91270a0f1fa7c21ec62c5413aa4ab1b5c96812b9f0a463497e94de43c85317c

    • SHA512

      7f3fcc6e26db886b929215c1b14c5e4cfe685210458e2a8e3336e3c0811ee2c1098c86f86cd74ec34fa5c0fe4140e779a06871944c56638bb212d437fe4f5f46

    Score
    1/10
    behavioral13behavioral14

    • Target

      PrivilegeManagement/PrivilegeManagement.xml

    • Size

      305B

    • MD5

      7a98dadfb66c353ad2739d367767921a

    • SHA1

      9fa7f301a45b4e34be00d6749ad1240f0caa712a

    • SHA256

      f8130df2038f54d64e75d59f35680db51d9482fac77ed8a8bcc962c5092c2b83

    • SHA512

      9e79edbd61f2d66dff0184f6f0d08683af6a74a3f8153e6a986638ea33054dd29259335c9e0936ead3da5c1ce317b54b5167416c7d0ca9dda2779581e67a6197

    Score
    1/10
    behavioral15behavioral16

    • Target

      Viguard.xml

    • Size

      2KB

    • MD5

      5c22a8d30a559e2620a88aed5975e955

    • SHA1

      eb5b51c838d910b2af6b139007aba24716fd1155

    • SHA256

      02b8e084ea45e97a184e9ccb26362df004561f0009b130a07ad6f04b6d78be6a

    • SHA512

      6f68c3ae5fb7847b3d2784e02a046f8a6dccd8c9678eda1a69fdbb9e96e26af09db0201d6a543780a5bec92a6a9c53e7504a054c55c950f1966c44ebc53df857

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks