Videos
Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.
- Distribution Method : Unknown
- MD5 : c1987b9d242524906793c89953a629e5
- Major Detection Name : Ransom.GlobeImposter (Malwarebytes), Ransom_FAKEGLOBE.G (Trend Micro)
- Encrypted File Pattern : .2cXpCihgsVxB3
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
- Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\wall.jpg)