映像
様々なランサムウェアに対応するAppCheckの事前防御、自動復旧およびリアルタイムバックアップ機能を映像でご確認いただけます。
- Distribution Method : Remote access through Remote Desktop Protocol(RDP) or Terminal Services
- MD5 : b4d152a4a0dc40258f3dfae88dd1e2c0
- Major Detection Name : Trojan/Win32.Matrix.C2428826 (AhnLab V3), Ransom_MATRIX.THDODAH (Trend Micro)
- Encrypted File Pattern : <Random>-<Random>.[Files4463@tuta.io]
- Malicious File Creation Location :
- C:\Users\%UserName%\AppData\Roaming\!ReadMe_To_Decrypt_Files!.rtf
- C:\Users\%UserName%\AppData\Roaming\<Random>.vbs
- Payment Instruction File : !ReadMe_To_Decrypt_Files!.rtf
- Major Characteristics :
- Offline Encryption
- Changes desktop background (C:\Users\%UserName%\AppData\Roaming\<Random>.jpg)