Record · corpus.blog/posts/01a087dd-ac7d-72ff-a9ef-a79c04bccaf3

Knock Knock Knocking on EhDoor (The Curious Case of an EPS file)

sec0wn.blogspot.com · published 10 October 2017

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at sec0wn.blogspot.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 23
Words captured: 1,254

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://community.rsa.com/community/products/netwitness/blog/2017/08/17/russian-bank-offices-hit-with-broad-phishing-wave

community.rsa.com

https://securingtomorrow.mcafee.com/business/ukrainian-financial-institutions-targeted-wave-malicious-eps-file-attacks/

securingtomorrow.mcafee.com

https://www.fireeye.com/blog/threat-research/2015/09/attack_exploitingmi.html

fireeye.com

https://www.fireeye.com/blog/threat-research/2017/05/eps-processing-zero-days.html

fireeye.com

https://www.virustotal.com/en/file/f8162f7aab545be7431812f33b68d46ac0f62775a658ed33eb7b072f0cdaa262/analysis/

virustotal.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEFAVVqjLB2oylAcc4e8I3xUxxlMgI0Hql_xRA5vziE8PVBgkZs4KWxmrEYsIeFeRP7Y_CKJVHM5TWYpHR7lG2FqdprRr_TFWW8E2z5T87cO-59ccoGEtBAS26MuyegWExKwpPT988juWJ/s1600/russian+lure.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQbbt_gJ5qwLyzfLCzKAfAuGVdxG7g_Zks8KnaXQhHL9FI5gOqYQKQs-oUyusDGOtaf3YfjnVg931Tt25RK_ymF07NZllfkMrLaa9Z-dzzA16pbjVfDGvqxNnBXTt4b8EDMgBTZ_aqmX8e/s1600/same+XOR.png

blogger.googleusercontent.com

https://www.virustotal.com/

virustotal.com

https://www.reuters.com/article/us-india-cyber-threat/exclusive-india-and-pakistan-hit-by-spy-malware-cybersecurity-firm-idUSKCN1B80Y2

reuters.com

https://www.symantec.com/security_response/writeup.jsp?docid=2016-092906-5002-99&tabid=2

symantec.com

https://www.virustotal.com/en/file/d2363f6b01b72fbd23a6c60565b8cb749041473f438ac6d399cb212463b6c87b/analysis/

virustotal.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBpwuzysvmQIbMXIkOi1vR-SvsOquWRN2ftihlzId6t01D9DdullqfCLfsFkZsN9rX_2-QEBsWG7H8YNA9aabH7BEtKb2y1uH0D_k6x9_M2ASJWqJKEAui4dbjcNtsKmV2J3MdzMctgCm6/s1600/PDB+Strings.png

blogger.googleusercontent.com

http://www.hackqq.com/thread-1033.htm

hackqq.com

http://bobao.360.cn/learning/detail/4020.html

bobao.360.cn

https://download.bitdefender.com/resources/files/News/CaseStudies/study/171/Bitdefender-Whitepaper-EHDevel-A4-en-EN.pdf?adobe_mc=MCMID%3D15804029632425564761935462236849527380%7CMCORGID%3D0E920C0F53DA9E9B0A490D45%2540AdobeOrg%7CTS%3D1506038400

download.bitdefender.com

https://www.hybrid-analysis.com/advanced-search

hybrid-analysis.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxEnEyu0EyqHKHCi_6w4uV-aD502hLx7JUrJYxEf-aMnbwh6XBYmrB4o5vkDi-LxpAwsA9bVx6CdQwfGY9QckHXHz4SU-Bb5YofpIsToF6svyJALUDC2hs2zKB3Hz0_brasJy3AU1E1JRr/s1600/Advanced+Search.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR9u7sJ93lqdXBn7sJlgi8YU31AHjggL-A5oWB8UJ34VQXxFpzxRZaz3IAkj9uq3Qf5I7xuAagNdtF_bdT9flcRpjeZXTSqcjrbywMgU6yO_dPnBL0yLvvEWZGh_VnwWCVC79gjZOuglWA/s1600/Sample+1.png

blogger.googleusercontent.com

https://repo.quicksand.io/47b82ed9105cfcf257e7517846514d39d33ebfafc83372051670ba16511c548b.html

repo.quicksand.io

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTmcDrvbxgzwTpT34m9aby8kRLffG2Qst0z8ZWVVJ7vGj2twXMrg5l6r1o-07Ea0RlZvtPIZcjcpgQx8dqjcgxB4_1SG3F-cj8uyivBzBEFmUArINLfUoYZhhzWZ61vWeZFpuPTrDtRCZk/s1600/Strings+from+sample.png

blogger.googleusercontent.com

https://repo.quicksand.io/b812a2cabd0fe7be337fe55efddf1b06db0712a701cd4601922815b83d8389d5.html

repo.quicksand.io

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKgrZDALlRX5i8fhLX82Sp5K3V5i90z1RrW1yDSfoJMsctYV_n6l_5G3tea9S4Gg38wdodpRBGkAqGdl7sO8UJ-kUH-WAVthieG1Nv_Y9UxZTxoV7EwZVWMImb44eRAtLsQGrIjETSVKoq/s1600/Sample+2.png

blogger.googleusercontent.com

http://www.thehindu.com/opinion/interview/peace-along-the-border-is-not-a-one-way-process-says-lt-gen-ds-hooda/article18468112.ece

thehindu.com