Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

  • Distribution Method : Unknown
 
  • MD5 : ad25b6af563156765025bf92c32df090
 
  • Major Detection Name : Ransom.Nefilim (Malwarebytes), Ransom:Win32/Nefilim.GM!MTB (Microsoft)
 
  • Encrypted File Pattern : .OFFWHITE
 
  • Payment Instruction File : OFFWHITE-MANUAL.txt
 
  • Major Characteristics :
     - Offline Encryption
     - Nemty / Pluto Ransomware series
     - Use a "Svos Pty Limited" Digital Signatures
     - Disable system restore (WmIc ShaDowcoPY delEte)
     - Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\scam.jpg)

List

위로