Search
Keyword: usojan.ps1.mimikatz.ads
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes the initially executed copy of itself. It
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It lowers the security setting of Internet Explorer.
rgss3a rha wwt wxmx wxp wyn wzn wzs x11 x16 xgml xht xhtml xif xig xis xjf xl xla xlam ync yps yuv z02 z04 zap zip zipx zoo $efs 000 001 1 101 103 108 110 123 128 1cd 1sp 1st 3 3d 3d4 3dd 3df 3df8 3dm 3dr
This Ransomware arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and
\ 1 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ CLSID\{15D6504A-5494-499C-886C-973C9E53B9F1}\Implemented Categories\ {7DD95802-9882-11CF-9FA9-00AA006C42C4} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ CLSID\
Inj = "1" HKEY_CURRENT_USER\Software\remcos_hvbmtksknx FR = "1" It deletes the following registry keys: HKEY_CURRENT_USER\Software\remcos_hvbmtksknx\ Inj Dropping Routine This File infector drops the
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and
This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It disables Task Manager, Registry Editor, and Folder
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\Policies\ System EnableLinkedConnections = 1 Process Termination This Ransomware terminates the following processes if
{hex values}" It modifies the following registry entries: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\SystemRestore DisableSR = "1" (Note: The default value data of the said registry
progress. Ransomware Routine This Ransomware encrypts files with the following extensions: 1cd 3dm 3ds 3fr 3g2 3gp 3pr 602 7z ps1 7zip aac ab4 accdb accde accdr accdt ach acr act adb adp ads aes agdl ai aiff
encrypts files with the following extensions: 3dm 3ds 3fr 3g2 3gp 3pr 602 7z ps1 7zip aac ab4 accdb accde accdr accdt ach acr act adb adp ads aes agdl ai aiff ait al aoi apj arc arw asc asf asm asp aspx asx
This Hacking Tool may be manually installed by a user. It requires its main component to successfully perform its intended routine. Arrival Details This Hacking Tool may be manually installed by a
→ Used HTTP GET request Ransomware Routine This Ransomware encrypts files with the following extensions: 3dm 3ds 3fr 3g2 3gp 3pr 602 7z ps1 7zip aac ab4 accdb accde accdr accdt ach acr act adb adp ads aes
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan Spy arrives on a system
\Microsoft.NET\authman\RunExec.exe" HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ Microsoft\Windows Defender DisableAntiSpyware = "1" HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\ Control\SecurityProviders\WDigest
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a