MITRE ATT&CKsoftware (malware)

S0365 Olympic Destroyer

Published 2019-03-25 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Version
2.0
Created
2019-03-25

Description

Olympic Destroyer is malware that was used by Sandworm Team against the 2018 Winter Olympics, held in Pyeongchang, South Korea. The main purpose of the malware was to render infected computer systems inoperable. The malware leverages various native Windows utilities and API calls to carry out its destructive tasks. Olympic Destroyer has worm-like features to spread itself across a computer network in order to maximize its destructive impact.

Related

Uses · MITRE ATT&CK (14)

  • T1685.005 Clear Windows Event Logs sub-technique
  • T1570 Lateral Tool Transfer technique
  • T1569.002 Service Execution sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1003.001 LSASS Memory sub-technique
  • T1021.002 SMB/Windows Admin Shares sub-technique
  • T1529 System Shutdown/Reboot technique
  • T1490 Inhibit System Recovery technique
  • T1489 Service Stop technique
  • T1485 Data Destruction technique
  • T1135 Network Share Discovery technique
  • T1016 System Network Configuration Discovery technique
  • T1018 Remote System Discovery technique
  • T1047 Windows Management Instrumentation technique

Referenced by MITRE ATT&CK · uses (1)

  • G0034 Sandworm Team group

References