Overview

overview

10

Static

static

10

HermeticWiper.exe

windows10-2004-x64

8

Resubmissions

28-01-2023 12:31

230128-pp1hcagc4s 10

05-09-2022 08:24

220905-ka1scadgek 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HermeticWiper.exe.virus

  • Size

    114KB

  • Sample

    230128-pp1hcagc4s

  • MD5

    84ba0197920fd3e2b7dfa719fee09d2f

  • SHA1

    912342f1c840a42f6b74132f8a7c4ffe7d40fb77

  • SHA256

    0385eeab00e946a302b24a91dea4187c1210597b8e17cd9e2230450f5ece21da

  • SHA512

    bbd4f0263abc71311404c55cb3e4711b707a71e28dcc1f08abd533a4c7f151db9cc40697105d76f1c978000e8fa7aa219adb65b31fb196b08f1ae003e04b9d23

  • SSDEEP

    1536:lV3+WmNcWbwurilmw9BgjKu1sPPxaS5qY:lV3+WmjbwxlPwV1qPkS5qY

Score
10/10
hermeticwiperpersistencewiper

Malware Config

Targets

    • Target

      HermeticWiper.exe.virus

    • Size

      114KB

    • MD5

      84ba0197920fd3e2b7dfa719fee09d2f

    • SHA1

      912342f1c840a42f6b74132f8a7c4ffe7d40fb77

    • SHA256

      0385eeab00e946a302b24a91dea4187c1210597b8e17cd9e2230450f5ece21da

    • SHA512

      bbd4f0263abc71311404c55cb3e4711b707a71e28dcc1f08abd533a4c7f151db9cc40697105d76f1c978000e8fa7aa219adb65b31fb196b08f1ae003e04b9d23

    • SSDEEP

      1536:lV3+WmNcWbwurilmw9BgjKu1sPPxaS5qY:lV3+WmjbwxlPwV1qPkS5qY

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks