hello. This is White Defender.
Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.
whitedefender video
This is a video of White Defender responding to ransomware threats.
- title
- Globeimposter Ransomware
- Registration date
- 2020-12-05
- type
- Ransomware
- Treatment method
- Diagnosis/treatment is possible with WhiteDefender.
- change extension
- .Zeta865qqz
- ransom note
- Previous post
- Birbware Ransomware
- next post
- Clop Ransomware
Everyzone White Defender Co., Ltd. |
CEO: Seunggyun Hong|Business registration number: 220-81-67981
Copyright ⓒEveryzone , Inc. All Rights
Reserved.|
This is the 54th ransomware blocking test video of Global Anti-Ransomware White Defender.
*Analysis Information*
The GlobeImposter ransomware variant (.Globeimposter-Zeta865qqz), which executed ransomware by accessing via remote control (RDP) using vulnerable times on weekends, was recently confirmed in Korea. After execution, it stops many services and disables system recovery functions before being executed. In particular, it has the characteristic of exposing a money request message file through the HOW TO BACK YOUR FILES.exe executable file. In an environment where the remote control function is used, ransomware attacks, etc. can be carried out by secretly accessing the system during weekends, nights, etc., so please pay attention to security settings to prevent easy access.
Ransomware name: Globeimposter Ransomware
encryption Extension: .Zeta865qqz
Ransom note (payment information): HOW TO BACK YOUR FILES.exe
Features: Encrypt all files
MD5: f5ffbbea5ed2f726fc4aac7eaf1d69dc
SHA1: 599b249409fadf189318752dc43ddf93cb838ea2
SHA256: 9b8ae06f1bf7850116fe49ea07b979bddb24e5b862b813ead02deee6456be05d