HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine
Tags
country: Russia Ukraine
attack-pattern: Data Data Destruction - T1662 Data Destruction - T1485 File Deletion - T1070.004 File Deletion - T1630.002 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Tool - T1588.002 Connection Proxy - T1090 File Deletion - T1107 Data Destruction
Show in Graph
Common Information
Type Value
UUID 4fd71858-720f-4c49-9dd0-797327b7d919
Fingerprint 8f809a1365252481
Analysis status DONE
Considered CTI value 2
Text language
Published March 4, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Sept. 4, 2024, 7:41 a.m.
Headline HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine
Title HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine
Detected Hints/Tags/Attributes 71/2/6
Source URLs
Redirection Url
Details Source https://blog.malwarebytes.com/threat-intelligence/2022/03/hermeticwiper-a-detailed-analysis-of-the-destructive-malware-that-targeted-ukraine/
URL Provider
Details Provider Source level domain
Details malwarebytes.com blog.malwarebytes.com
Attributes
Details Type #Events CTI Value
Details File 11 
disk.sys
Details sha256 23 
1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591
Details sha256 6 
2c7732da3dcfc82f60f063f2ec9fa09f9d38d5cfbe80c850ded44de43bdb666d
Details sha256 6 
23ef301ddba39bb00f0819d2061c9c14d17dc30f780a945920a51bc3ba0198a4
Details sha256 6 
8c614cf476f871274aa06153224e8f7354bf5e23e6853358591bf35a381fb75b
Details sha256 7 
96b77284744f8761c4f2558388e0aee2140618b484ff53fa8b222b340d2a9c84