Names | TerraWiper | |
Category | Malware | |
Type | Wiper | |
Description | (QuoINT) In October 2018 while hunting for TerraCrypt variants we discovered a wiper malware we dubbed TerraWiper. TerraWiper is a Master Boot Record (MBR) wiper compiled from PureBasic, and it uses a slightly different version of the obfuscator used for TerraLoader variants. TerraWiper samples attempt to render a machine unbootable by zero-ing its MBR. Therefore, it would be possible for an infected computer to easily recover the data, or to make the machine boot again by fixing its MBR. | |
Information | <https://quointelligence.eu/2020/01/the-chicken-keeps-laying-new-eggs-uncovering-new-gc-maas-tools-used-by-top-tier-threat-actors/> |
Last change to this tool card: 10 July 2020
Download this tool card in JSON format
Previous: TerraTV
Next: THC Hydra
Changed | Name | Country | Observed | ||
Other groups | |||||
Venom Spider, Golden Chickens | ![]() | 2017-Feb 2019 |
1 group listed (0 APT, 1 other, 0 unknown)
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on![]() ![]() |
Report incidents |
|
![]() |
+66 (0)2-123-1234 | |
![]() |
report@thaicert.or.th | |
![]() |
Download PGP key |