threatintel
actor tracker
IOC pivot
ioc · sha-1

fd9c17c35a68fc505235e20c6e50c622aed8dea0

RU · RussiaSandwormconfidence · high

Industroyer2 sample (108_100.exe), an IEC-104 ICS-disruption tool that Sandworm deployed against a Ukrainian energy provider on 8 April 2022. Discovery and IOC publication by ESET working with CERT-UA; ESET assesses Sandworm responsibility with high confidence.

family
Industroyer2
first seen
Apr 7, 2022
publisher
ESET
source citation