It’s ransomware… It’s VIRLOCK

More documents

Recommendations

Info

Conclusions • We face new generations of file infectors • Most of them include compiler technologies , multi stage unpacking and anti-analysis tricks to block analysis be it static or dynamic • Virlock is among the first malwares to combine ransomware and file infection technologies • All these changes provides us with a clear picture of even more hybrid malware technologies, working together to persist longer 30.09.2015 www.bitdefender.com 32
? 30.09.2015 www.bitdefender.com 33
Page 1 and 2: It’s a file infector… It’s ra
Page 3 and 4: Background • Most malware on toda
Page 5 and 6: Ransomwares and file infectors Scre
Page 7 and 8: Ransomwares and file infectors •
Page 9 and 10: Ransomwares and file infectors •
Page 11 and 12: Introducing Virlock • Virlock - h
Page 13 and 14: Introducing Virlock File infection
Page 15 and 16: Malware installation • Setting up
Page 17 and 18: Malware installation • Getting to
Page 19 and 20: Account password brute-force • A
Page 21 and 22: Anti-analysis tricks • Detecting
Page 23 and 24: Anti-analysis tricks • Decrypt E
Page 25 and 26: Polymorphic engine • Basic reshap
Page 27 and 28: Different malware versions • Simi
Page 29 and 30: Statistics • Spreading of Win32.V
Page 31: Statistics • Areas with an increa

It’s ransomware… It’s VIRLOCK

Create successful ePaper yourself

Delete template?

Save as template?