Overview

overview

9

Static

static

3

wiper.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    wiper.exe
  • Size 843KB
  • Sample261003-pgjvmaztew
  • SHA256 12328e3beb3174f1efeb52837ef77eae875465c85bbba69fb3aab313ecd5db3a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
bootkitevasionexecutionpersistenceransomware

Malware Config

Targets

    • Target
      wiper.exe
    • Size 843KB
    • SHA256 12328e3beb3174f1efeb52837ef77eae875465c85bbba69fb3aab313ecd5db3a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    bootkitevasionexecutionpersistenceransomware

    • Modifies boot configuration data using bcdedit

      ransomwareevasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks