DynoWiper
Software · ATTACK:enterprise:S9038
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S9038",
"title": "DynoWiper",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S9038",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--34057cb6-0a56-48a3-92e5-3af1357808da",
"external_id": "S9038",
"domain": "enterprise",
"created": "2026-04-22T22:09:31.886Z",
"modified": "2026-04-23T23:21:34.879Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "CERT Polska",
"url": "https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Report_2025.pdf"
},
{
"source_name": "ESET DynoWiper Update JAN 2026",
"url": "https://www.welivesecurity.com/en/eset-research/dynowiper-update-technical-analysis-attribution/"
}
]
}Explicit source assertions (10)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1529
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--13ff8433-97c7-40c3-a082-812453731bf2
CERT PolskaATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1485
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3e18cf3c-e185-4f9f-a413-7cfc89f28b48
CERT Polska · ESET DynoWiper Update JAN 2026ATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1679
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3f95e9db-52a6-4dbe-b08f-5cfc15723d6a
CERT Polska · ESET DynoWiper Update JAN 2026ATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1680
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--501b58a3-5315-4415-8e4a-b2ee65db5013
CERT PolskaATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1083
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5f013e67-6f7b-4ea5-86d4-91940f3b74cb
CERT PolskaATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1106
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--80bf6361-8d29-4f25-8b76-64a3751686ed
CERT Polska · ESET DynoWiper Update JAN 2026ATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1120
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a8bae6db-bf02-4e4e-93b0-140e8426b789
ESET DynoWiper JAN 2026ATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1036
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c5fe3e1e-775e-4fe6-8a70-0a7e70835081
CERT Polska · ESET DynoWiper Update JAN 2026ATTACK:enterprise:C0063 → uses → ATTACK:enterprise:S9038
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d2a0cc1b-10b4-4040-bd36-8856c064c7ae
CERT Polska · ESET DynoWiper JAN 2026ATTACK:enterprise:S9038 → uses → ATTACK:enterprise:T1678
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dd737a22-2390-4ffd-9ab7-4c9574fedfd7
CERT Polska · ESET DynoWiper Update JAN 2026