Olympic Destroyer

ATP Sandbox Adv. HeuristicsAV

Stats

First seen: February 2022
Last seen: October 2026

MITRE ATT&CK techniques

14 techniques across 6 tactics.

TA0002 Execution

T1047Windows Management Instrumentation
T1569System Services
- T1569.002Service Execution

TA0006 Credential Access

T1003OS Credential Dumping
- T1003.001LSASS Memory
T1555Credentials from Password Stores
- T1555.003Credentials from Web Browsers

TA0007 Discovery

T1016System Network Configuration Discovery
T1018Remote System Discovery
T1135Network Share Discovery

TA0008 Lateral Movement

T1021Remote Services
- T1021.002SMB/Windows Admin Shares
T1570Lateral Tool Transfer

TA0040 Impact

T1485Data Destruction
T1489Service Stop
T1490Inhibit System Recovery
T1529System Shutdown/Reboot

TA0112 Defense Impairment

T1685Disable or Modify Tools
- T1685.005Clear Windows Event Logs

Associated groups

G0034Sandworm Team

Alert name variants

Alert Name	Engine
Gen:Variant.OlympicDestroyer.1	AV
Win32.Backdoor.OlympicDestroyer	ATP Sandbox Adv. Heuristics

Related blogs

Netskope Threat Coverage: 2020 Tokyo Olympics Wiper Malware

Netskope Threat Coverage: 2020 Tokyo Olympics Wiper Malware

July 29, 20214 min read

Related families

Qilin Cobalt Strike BlackCat Shamoon Empire