SYMBOLCOMMON_NAMEaka. SYNONYMS
win.filerase (Back to overview)

Filerase

Actor(s): APT33

Filerase is a .net API-based utility capable of propagating and recursively deleting files.

References
2018-12-19 ⋅ McAfee ⋅ Christiaan Beek, Jessica Saavedra-Morales, Thomas Roccia
Shamoon Attackers Employ New Tool Kit to Wipe Infected Systems
Filerase
2018-12-14 ⋅ Symantec ⋅ Critical Attack Discovery and Intelligence Team
Shamoon: Destructive Threat Re-Emerges with New Sting in its Tail
DistTrack Filerase StoneDrill OilRig

There is no Yara-Signature yet.