Search
Keyword: ransom_cerber
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
potx pptm pptx pps pot ppt xlw xll xlam xla xlsb xltm xltx xlsm xlsx xlm xlt xls xml dotm dotx docm docx dot doc txt After successfully encrypting user's files, it drops the ransom note
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
{random characters}.bmp - image used as wallpaper %User Profile%\My Documents\Decrypt All Files {random characters}.txt - ransom note in text file %User Profile%\My Documents\{random characters}.html
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
\00000000 %All Users Profile%\Application Data\{random folder name}\02000000 %All Users Profile%\Application Data\{random folder name}\03000000 - copy of ransom note %All Users Profile%\Application Data\
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. Arrival Details This
folder name}\02000000 %All Users Profile%\Application Data\{random folder name}\03000000 - copy of ransom note %All Users Profile%\Application Data\{random folder name}\04000000 (Note: %All Users Profile%
malicious URL: http://{BLOCKED}happy.ru:443 NOTES: This Trojan renames encrypted files using the file name {original file name and extension}.encrypted . It drops the ransom note DECRYPT_INSTRUCTIONS.html in
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It gathers certain information on the affected computer.
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive