映像
様々なランサムウェアに対応するAppCheckの事前防御、自動復旧およびリアルタイムバックアップ機能を映像でご確認いただけます。
- Distribution Method : Unknown
- MD5 : e8fcd575754eaf1797609e116ee43e82
- Major Detection Name : Ransom:Win32/Higuniel.A (Microsoft), Ransom_Higuniel.R002C0DEH19 (Trend Micro)
- Encrypted File Pattern : .SOW
- Malicious File Creation Location :
- C:\Users\%UserName%\AppData\Roaming\Host Process for Windows Services\service.log
- C:\Users\%UserName%\AppData\Roaming\Host Process for Windows Services\svchost.exe
- C:\Users\%UserName%\Host Process for Windows Services\HOW TO DECRYPT FILES.hta
- C:\Users\%UserName%\Host Process for Windows Services\HOW TO DECRYPT FILES.txt
- Payment Instruction File : HOW TO DECRYPT FILES.hta / HOW TO DECRYPT FILES.txt