Videos
Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.
- Distribution Method : Unknown
- MD5 : a84e8f71a05614ed99264111b9231998
- Major Detection Name : Generic.Ransom.Sadogo.9412983E (BitDefender), Ransom.Gibberish (Malwarebytes)
- Encrypted File Pattern : .encrypted
- Payment Instruction File : readme.txt
- Major Characteristics :
- Offline Encryption
- Embrace / PainLocker Ransomware series
- Block processes execution (fdlauncher.exe, MsDtsSrvr.exe, msmdsrv.exe, postgres.exe, sqlbrowser.exe, sqlwriter.exe etc.)
- Stop multi services (MSSQL, MSSQLFDLauncher, SQLSERVERAGENT, TmFilter, vmickvpexchange, WRSVC etc.)
- Disable system restore (vssadmin delete shadows /all /quiet)