Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

  • Distribution Method : Unknown
 
  • MD5 : c41a0e1ddeb85b6326a3dc403a5fd0fa
 
  • Major Detection Name : Trojan/Win32.ClopRansom.C3001935 (AhnLab V3), Ransom:Win32/Clop.A!MTB (Microsoft)
 
  • Encrypted File Pattern : .Clop
 
  • Payment Instruction File : ClopReadMe.txt
 
  • Major Characteristics :
     - Offline Encryption
     - Block processes execution (isqlplussv.exe, msftesql.exe, mysqld-nt.exe, mysqld-opt.exe, mysqld.exe, sqlservr.exe etc.)
     - Excludes encryption on specific folders named "AhnLab, All Users, Chrome, Microsoft, Mozilla, Program Files, Program Files (x86), ProgramData, Recycle.bin, Windows"

List

위로