Search/HermeticWizard

● Malware

HermeticWizard

HermeticWizard is a worm that has been used to spread HermeticWiper in attacks against organizations in Ukraine since at least 2022.

View graph Watch Export

Indicators tracked

0

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

16 relationships

T1047: Windows Management Instrumentation

T1218.011: Rundll32

T1110.001: Password Guessing

T1027.013: Encrypted/Encoded File

T1036.005: Match Legitimate Resource Name or Location

T1559.001: Component Object Model

T1553.002: Code Signing

T1106: Native API

T1021.002: SMB/Windows Admin Shares

T1685.005: Clear Windows Event Logs

T1218.010: Regsvr32

T1570: Lateral Tool Transfer

T1059.003: Windows Command Shell

T1018: Remote System Discovery

T1046: Network Service Discovery

T1569.002: Service Execution