Videos
Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.
- Distribution Method : Unknown
- MD5 : 365f4c61ce7860318857d831d0294887
- Major Detection Name : Trojan-Ransom.Win32.Cryptor.it (Kaspersky), Ransom_BTCWARE.W (Trend Micro)
- Encrypted File Pattern : .[avalona.toga@aol.com].blocking
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\Info.hta
- Payment Instruction File : !#_READ_ME_#!.hta / Info.hta
- Major Characteristics :
- Offline Encryption
- Aleta / Crptxxx / Gryphon / Master Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet, bcdedit.exe /set {default} recoveryenabled No, bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures)