Gold Open Source
ExplorePackagesVulnerabilitiesCWEsMCP ServersScan
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Certified Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/ATT&CK/Software/S0697
MITRE ATT&CK Malware

HermeticWiper (S0697)

Trojan.KilldiskDriveSlayer
ShareXLinkedInRedditHN

[HermeticWiper](https://attack.mitre.org/software/S0697) is a data wiper that has been used since at least early 2022, primarily against Ukraine with additional activity observed in Latvia and Lithuania. Some sectors targeted include government, financial, defense, aviation, and IT services.(Citation: SentinelOne Hermetic Wiper February 2022)(Citation: Symantec Ukraine Wipers February 2022)(Citation: Crowdstrike DriveSlayer February 2022)(Citation: ESET Hermetic Wiper February 2022)(Citation: Qualys Hermetic Wiper March 2022)

Platforms: Windows

▪Techniques implemented (26)

T1053.005Scheduled TaskT1685Disable or Modify ToolsT1134Access Token ManipulationT1484.001Group Policy ModificationT1485Data DestructionT1553.002Code SigningT1112Modify RegistryT1070Indicator RemovalT1083File and Directory DiscoveryT1561.002Disk Structure WipeT1490Inhibit System RecoveryT1497.003Time Based ChecksT1140Deobfuscate/Decode Files or InformationT1059.003Windows Command ShellT1082System Information DiscoveryT1106Native APIT1027.015CompressionT1680Local Storage DiscoveryT1036.005Match Legitimate Resource Name or LocationT1685.005Clear Windows Event LogsT1543.003Windows ServiceT1070.004File DeletionT1489Service StopT1561.001Disk Content WipeT1569.002Service ExecutionT1529System Shutdown/Reboot
S0697on MITRE ATT&CK →

MITRE ATT&CK® is a registered trademark of The MITRE Corporation. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.