← Back to malware index
CaddyWiper
Attributions are based on open-source threat reports. A family appearing here means at least one syscall record cites it; absence does not imply non-use.
4 syscalls cited
- NtRaiseHardError
Raises a 'hard error' that the kernel routes to CSRSS for UI prompting — or, with SeShutdownPrivilege and FATAL severity, triggers an immediate bugcheck (BSOD).
- NtWriteFile
Writes data to an open file, pipe, or device — the kernel companion to NtCreateFile for dropping payloads.
- NtSetSystemPowerState
Transitions the system into the requested sleep, hibernate or working power state.
- NtShutdownSystem
Kernel-mode shutdown trigger — powers off, reboots or shuts down the system in one syscall.