Cherepanov, A.. (2016, January 3). BlackEnergy by the SSHBearDoor: attacks against Ukrainian news media and electric industry. Retrieved May 18, 2016.
Not cited by any technique.
None recorded.
None recorded.
| Technique | Used by | Procedure example |
|---|---|---|
| T1485 Data Destruction |
MalwareKillDisk | KillDisk deletes system files to make the OS unbootable. KillDisk also targets and deletes files with 35 different file extensions. |
| T1685.005 Clear Windows Event Logs |
MalwareKillDisk | KillDisk deletes Application, Security, Setup, and System Windows Event Logs. |
| T1685.005 Clear Windows Event Logs |
MalwareBlackEnergy | The BlackEnergy component KillDisk is capable of deleting Windows Event Logs. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
