Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

  • Distribution Method : Unknown
 
  • MD5 : 2243c067ed2c016e6d0688ec7dc60b3b
 
  • Major Detection Name : a variant of MSIL/Filecoder.QE (ESET), Ransom_Crypmodadv.R020C0OK818 (Trend Micro)
 
  • Encrypted File Pattern : <Original Filename>.<Original Extension> → <Original Filename>.<5-Digit Random Extension>
 
  • Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\decryption
 
  • Payment Instruction File : Titan Instructions.html
 
  • Major Characteristics :
     - Offline Encryption
     - Argus Ransomware series
     - Kraken Cryptor Ransomware impostor
     - Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\wallpaper.bmp)

List

위로