MITRE ATT&CKsoftware (malware)

S1134 DEADWOOD

Published 2024-05-22 Modified 2024-08-26 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-05-22

Description

DEADWOOD is wiper malware written in C++ using Boost libraries. DEADWOOD was first observed in an unattributed wiping event in Saudi Arabia in 2019, and has since been incorporated into Agrius operations.

Related

Uses · MITRE ATT&CK (10)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1027.009 Embedded Payloads sub-technique
  • T1569.002 Service Execution sub-technique
  • T1561.001 Disk Content Wipe sub-technique
  • T1561.002 Disk Structure Wipe sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1531 Account Access Removal technique
  • T1485 Data Destruction technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1124 System Time Discovery technique

Referenced by MITRE ATT&CK · uses (2)

References