映像
様々なランサムウェアに対応するAppCheckの事前防御、自動復旧およびリアルタイムバックアップ機能を映像でご確認いただけます。
- Distribution Method : Unknown
- MD5 : 3829a09bca120206883539eb33d55311
- Major Detection Name : Ransom:Win32/GarrantDecrypt.PA!MTB (Microsoft), Ransom.Win32.TARGETCOMP.SMYXCCPT (Trend Micro)
- Encrypted File Pattern : .bozon3
- Payment Instruction File : RECOVERY INFORMATION.txt
- Major Characteristics :
- Mallox Ransomware series
- Block processes execution (fdlauncher.exe, MsDtsSrvr.exe, ntdbsmgr.exe, oracle.exe, ReportingServecesService.exe, sqlserv.exe etc.)
- Disable system restore (vssadmin.exe delete shadows /all /quiet, bcdedit /set {current} bootstatuspolicy ignoreallfailures, bcdedit /set {current} recoveryenabled no)