Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

  • Distribution Method : Installation via a MATA (Dacls) malware framework
 
  • MD5 : efd4a87e7c5dcbb64b7313a13b4b1012
 
  • Major Detection Name : Ransom.Vhd (Malwarebytes), Ransom.Win32.VHDLOCKER.B (Trend Micro)
 
  • Encrypted File Pattern : .vhd
 
  • Payment Instruction File : HowToDecrypt.txt
 
  • Major Characteristics :
     - Offline Encryption
     - Stop multi services (Microsoft Exchange Anti-spam Update, Microsoft Exchange Active Directory Toplogy, Microsoft Exchange Compliance Audit, Microsoft Exchange DAG Management, Microsoft Exchange EdgeSync, Microsoft Exchange Frontend Transport etc.)

List

위로