映像
様々なランサムウェアに対応するAppCheckの事前防御、自動復旧およびリアルタイムバックアップ機能を映像でご確認いただけます。
- Distribution Method : Download file by user
- MD5 : cd73333ce8a490ea9fe463a05f23e6bf
- Major Detection Name : AutoIt:Ransom-L [Trj] (avast), a variant of Win32/Filecoder.Crypt888.B (ESET)
- Encrypted File Pattern : Lock.<Original Filename>.<Original Extension>
- Malicious File Creation Location :
- C:\Users\%UserName%\AppData\Local\Temp\wl.jpg
- Major Characteristics :
- Encephalitis / GrodexCrypt / MicroCop Ransomware series
- AutoIt scripts based Ransomware
- Developed by a Korean
- Kill a web browser processes (chrome.exe / firefox.exe / iexplore.exe)
- Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\wl.jpg)