MultiLayer Wiper

Malware & Tools · MultiLayer Wiper

· MalwareS1135 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

Windows

Description

MultiLayer Wiper is wiper malware written in .NET associated with Agrius operations. Observed samples of MultiLayer Wiper have an anomalous, future compilation date suggesting possible metadata manipulation.(Citation: Unit42 Agrius 2023)

Tactic Coverage

impact (5)stealth (4)execution (2)defense impairment (2)persistence (1)privilege escalation (1)discovery (1)

Used By (1 groups)

G1030AgriusPink Sandstorm, AMERICIUM

Techniques (14)

T1027.009Embedded Payloads

stealth

T1053.005Scheduled Task

executionpersistence

T1059.003Windows Command Shell

execution

T1070Indicator Removal

stealth

T1070.004File Deletion

stealth

T1070.006Timestomp

stealth

T1083

References

https://attack.mitre.org/software/S1135 https://unit42.paloaltonetworks.com/agonizing-serpens-targets-israeli-tech-higher-ed-sectors/