The Year of the Wiper | FortiGuard Labs
Tags
country: Germany Finland Russia Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Defacement - T1491 File Deletion - T1070.004 File Deletion - T1630.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Python - T1059.006 Software - T1592.002 Tool - T1588.002 File Deletion - T1107
Show in Graph
Common Information
Type Value
UUID d5e41360-c7db-4d81-b3d6-c9951b22419d
Fingerprint ef6099080c630483
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 24, 2023, 1:13 p.m.
Added to db Feb. 14, 2023, 2:59 p.m.
Last updated Oct. 29, 2024, 11:32 a.m.
Headline The Year of the Wiper
Title The Year of the Wiper | FortiGuard Labs
Detected Hints/Tags/Attributes 101/3/23
Source URLs
Redirection Url
Details Source https://feeds.fortinet.com/~/725388215/0/fortinet/blog/threat-research~The-Year-of-the-Wiper
Details Source https://www.fortinet.com/blog/threat-research/the-year-of-the-wiper
URL Provider
Details Provider Source level domain
Details fortinet.com www.fortinet.com
Details fortinet.com feeds.fortinet.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 122 ✔ Fortinet Threat Research Blog https://feeds.fortinet.com/fortinet/blog/threat-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 2 
petya.bg
Details File 1 
somnia_07_08_22_with_funnysomnia.rar
Details File 1 
somnia_07_08_22_with_funnysomnia.exe
Details File 156 
1.exe
Details File 1 
funnysomnia.exe
Details File 1 
text.exe
Details File 1 
ip_scanner.zip
Details File 1 
ip_scanner.exe
Details File 1 
ip_scanner_unpacked.exe
Details sha256 1 
650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e
Details sha256 1 
100c5e4d5b7e468f1f16b22c05b2ff1cfaa02eafa07447c7d83e2983e42647f0
Details sha256 1 
ac5e68c15f5094cc6efb8d25e1b2eb13d1b38b104f31e1c76ce472537d715e08
Details sha256 1 
99cf5c03dac82c1f4de25309a8a99dcabf964660301308a606cdb40c79d15317
Details sha256 1 
156965227cbeeb0e387cb83adb93ccb3225f598136a43f7f60974591c12fafcf
Details sha256 1 
e449c28e658bafb7e32c89b07ddee36cadeddfc77f17dd1be801b134a6857aa9
Details sha256 1 
fbed7e92caefbd74437d0970921bfd7cb724c98c90efd9b6d0c2ac377751c9e5
Details sha256 1 
06fe57cadb837a4e3b47589e95bb01aec1cfb7ce62fdba1f4323bb471591e1d2
Details sha256 1 
1e0facd62d1958ccf79e049270061a9fce3223f7986c526f6f3a93ef85180a72
Details sha256 7 
3b2e708eaa4744c76a633391cf2c983f4a098b46436525619e5ea44e105355fe
Details sha256 1 
931b6b29e13d76a0e2e1e8b6910873d5ff7b88fd8c51cadf46057e47b695f187
Details sha256 1 
bdf8b53d73ca1ed1b649b32a61608b2cf952397ef3d5fc2e6e9f41ad98c40110
Details sha256 1 
91a9180a9cf7674c34ed53a8aa4e36b798334d1f448aeaf1afb9add4fd322b6e
Details sha256 1 
0ad0cd07ca69d8fd2b075fef6e6dd5e9f7debca92af3a6b84d83e51e23bc182d