StoneDrill

ATP Sandbox Adv. HeuristicsAV

Description

StoneDrill is wiper malware discovered in destructive campaigns against Middle Eastern and European targets, associated with the APT33 threat actor.

Stats

First seen: March 2022
Last seen: October 2026

Also known as

Stonedrill

MITRE ATT&CK techniques

15 techniques across 6 tactics.

TA0002 Execution

T1047Windows Management Instrumentation
T1059Command and Scripting Interpreter
- T1059.005Visual Basic

TA0005 Stealth

T1027Obfuscated Files or Information
- T1027.013Encrypted/Encoded File
T1055Process Injection
T1070Indicator Removal
- T1070.004File Deletion
T1497Virtualization/Sandbox Evasion

TA0007 Discovery

T1012Query Registry
T1082System Information Discovery
T1124System Time Discovery
T1518Software Discovery
- T1518.001Security Software Discovery

TA0009 Collection

T1113Screen Capture

TA0011 Command and Control

T1105Ingress Tool Transfer

TA0040 Impact

T1485Data Destruction
T1561Disk Wipe
- T1561.002Disk Structure Wipe
- T1561.001Disk Content Wipe

Associated groups

G0064APT33

Alert name variants

Alert Name	Engine
Gen:Variant.StoneDrill.3	AV
Win32.Backdoor.Stonedrill	ATP Sandbox Adv. Heuristics
Win32.Trojan.Stonedrill	ATP Sandbox Adv. Heuristics
Win32.Trojan.StoneDrill	ATP Sandbox Adv. Heuristics

Related families

Bazar DarkGate Bumblebee Metamorfo REvil

References