TerraWiper
Description
(QuoINT) In October 2018 while hunting for TerraCrypt variants we discovered a wiper malware we dubbed TerraWiper. TerraWiper is a Master Boot Record (MBR) wiper compiled from PureBasic, and it uses a slightly different version of the obfuscator used for TerraLoader variants. TerraWiper samples attempt to render a machine unbootable by zero-ing its MBR. Therefore, it would be possible for an infected computer to easily recover the data, or to make the machine boot again by fixing its MBR.
Names
| Name |
|---|
| TerraWiper |
Category
Malware
Type
- Wiper
Information
Other Information
Uuid
20f5dc28-f743-4940-ae85-6c77d0223dc2
Last Card Change
2020-07-10