It’s ransomware… It’s VIRLOCK

More documents

Recommendations

Info

Account password brute-force • Malware is trying some kind of dictionary brute force attack in an attempt to gain administrative privileges • It creates it’s own account after that 30.09.2015 www.bitdefender.com 18
Account password brute-force • A couple of tried passwords 1qaz@WSX 12345678 changeme P@ssword Password! Passw0rd 1q2w3e4r Password01 Password P@ssw0rd Password1 12345 123456789 1234 123456 Admin Passw0rd p@ssw0rd Pa$$w0rd Abc123 Qwerty Master Password1 welcome orig_Administrator operator123 N0th1n9 1q2w3e4r5t6y7u8i abcd12345 Administrator Q1w2e3r4 q1w2e3r4t5 30.09.2015 www.bitdefender.com 19
Page 1 and 2: It’s a file infector… It’s ra
Page 3 and 4: Background • Most malware on toda
Page 5 and 6: Ransomwares and file infectors Scre
Page 7 and 8: Ransomwares and file infectors •
Page 9 and 10: Ransomwares and file infectors •
Page 11 and 12: Introducing Virlock • Virlock - h
Page 13 and 14: Introducing Virlock File infection
Page 15 and 16: Malware installation • Setting up
Page 17: Malware installation • Getting to
Page 21 and 22: Anti-analysis tricks • Detecting
Page 23 and 24: Anti-analysis tricks • Decrypt E
Page 25 and 26: Polymorphic engine • Basic reshap
Page 27 and 28: Different malware versions • Simi
Page 29 and 30: Statistics • Spreading of Win32.V
Page 31 and 32: Statistics • Areas with an increa
Page 33: ? 30.09.2015 www.bitdefender.com 33

It’s ransomware… It’s VIRLOCK

Create successful ePaper yourself

Delete template?

Save as template?