Wiper malware steps

1. Steal credentials from browser and system.
2. Spread to other systems using psexec and WMI tools.
3. First delete all shadow copies of files and windows backup catalogs.
4. Turn off recovery mode.
5. Delete system logs.

This will cover tracks and making difficult to recover