S1132 IPsec Helper
malwareEnterpriseplatformsWindows
also known asIPsec Helper
IPsec Helper is a post-exploitation remote access tool linked to Agrius operations. This malware shares significant programming and functional overlaps with Apostle ransomware, also linked to Agrius. IPsec Helper provides basic remote access tool functionality such as uploading files from victim systems, running commands, and deploying additional payloads.
01
techniques used (15)
ATT&CK techniques this enables or maps to.
02
used by groups (1)
Threat groups associated with this.
03
source
Where this definition is published.
scry
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan