HermeticWiper/FoxBlade Analysis (in-depth)
Tags
country: | Latvia Lithuania Russia |
attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Tool - T1588.002 |
Common Information
Type | Value |
---|---|
UUID | 98122c65-b189-4675-94f9-47c4a4b1a77f |
Fingerprint | 8e24390d7d7f0f81 |
Analysis status | DONE |
Considered CTI value | 2 |
Text language | |
Published | March 4, 2022, midnight |
Added to db | Aug. 31, 2024, 11:18 a.m. |
Last updated | Sept. 3, 2024, 8:29 a.m. |
Headline | HermeticWiper/FoxBlade Analysis (in-depth) |
Title | HermeticWiper/FoxBlade Analysis (in-depth) |
Detected Hints/Tags/Attributes | 38/2/6 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://eln0ty.github.io/malware%20analysis/HermeticWiper/ |
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 481 | ✔ | eln0ty | https://eln0ty.github.io/feed | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | File | 1 | c:\windows\system32\drivers\epmntdrv.sys |
|
Details | sha256 | 18 | 0385eeab00e946a302b24a91dea4187c1210597b8e17cd9e2230450f5ece21da |
|
Details | sha256 | 9 | e5f3ef69a534260e899a36cec459440dc572388defd8f1d98760d31c700f42d5 |
|
Details | sha256 | 9 | b01e0c6ac0b8bcde145ab7b68cf246deea9402fa7ea3aede7105f7051fe240c1 |
|
Details | sha256 | 9 | b6f2e008967c5527337448d768f2332d14b92de22a1279fd4d91000bb3d4a0fd |
|
Details | sha256 | 9 | fd7eacc2f87aceac865b0aa97a50503d44b799f27737e009f91f3c281233c17d |