MultiLayer Wiper
- ID
- S1135
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 29 Aug 2024
MultiLayer Wiper is wiper malware written in .NET associated with Agrius operations. Observed samples of MultiLayer Wiper have an anomalous, future compilation date suggesting possible metadata manipulation.[1]
Techniques used (14)
- T1027.009 Embedded Payloads
- T1053.005 Scheduled Task
- T1059.003 Windows Command Shell
- T1070 Indicator Removal
- T1070.004 File Deletion
- T1070.006 Timestomp
- T1083 File and Directory Discovery
- T1485 Data Destruction
- T1490 Inhibit System Recovery
- T1529 System Shutdown/Reboot
- T1561.002 Disk Structure Wipe
- T1565.001 Stored Data Manipulation
- T1685 Disable or Modify Tools
- T1685.005 Clear Windows Event Logs