Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

White Ransomware (<Original Filename>.<Original Extension> / README.TXT)

  • Distribution Method : Unknown
 
  • MD5 : f4bec7029604d7a980b23cb558798b47
 
  • Major Detection Name : Trojan.Crypt (Malwarebytes), Trojan:Win32/Ymacco.AA52 (Microsoft)
 
  • Encrypted File Pattern : <Original Filename>.<Original Extension>
 
  • Malicious File Creation Location :
     - C:\NewFolder
     - C:\NewFolder\org.pdf
     - C:\NewFolder\result.exe
 
  • Payment Instruction File : README.TXT
 
  • Major Characteristics :
     - Offline Encryption
     - The Korean users are targeted.

List

위로