S1135 MultiLayer Wiper

malwareEnterprise

platformsWindows

also known asMultiLayer Wiper

MultiLayer Wiper is wiper malware written in.NET associated with Agrius operations. Observed samples of MultiLayer Wiper have an anomalous, future compilation date suggesting possible metadata manipulation.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1027.009Embedded Payloads
T1053.005Scheduled Task
T1059.003Windows Command Shell
T1070Indicator Removal
T1070.004File Deletion
T1070.006Timestomp
T1083File and Directory Discovery
T1485Data Destruction
T1490Inhibit System Recovery
T1529System Shutdown/Reboot
T1561.002Disk Structure Wipe
T1565.001Stored Data Manipulation
T1685Disable or Modify Tools
T1685.005Clear Windows Event Logs

used by groups (1)

Threat groups associated with this.

G1030Agrius

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan