RawDisk (d86a562d-d235-4481-9a3f-273fa3ebe89a)
RawDisk is a legitimate commercial driver from the EldoS Corporation that is used for interacting with files, disks, and partitions. The driver allows for direct modification of data on a local computer's hard drive. In some cases, the tool can enact these raw disk modifications from user-mode processes, circumventing Windows operating system security features.[EldoS RawDisk ITpro][Novetta Blockbuster Destructive Malware]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Lazarus Group (0bc66e95-de93-4de7-b415-4041b7191f08) | Tidal Groups | RawDisk (d86a562d-d235-4481-9a3f-273fa3ebe89a) | Tidal Software | 1 |