hello. This is White Defender.
Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.
This is a video of White Defender responding to ransomware threats.
*Analysis Information*
①Satan ransomware is an encryption virus that operates as Ransomware-as-a-service.
②It exploits vulnerabilities in SMB (Server Message Block) and spreads attacks through spam emails and malicious websites.
③Languages are included for Korea, China, and the United States.
Ransomware name: Satan ransomware
Encryption extension: .dbger
Ransom note (payment information): _How_to_decrypt_files.txt
Features: - Offline Encryption - Payment instructions written in English / Chinese / Korean Targeting users in a specific country through documents - Attempting to spread network infection using both the EternalBlue SMB vulnerability and the Mimikatz tool - BMP file not encrypted?
MD5: c0150256a864e5c634380a53290c7649
SHA1: eb5c5235b711440f7eb86e508d2ee30fd26252e8
SHA256: 34e84820aceb78135c210933d95e404639eff8bf39 01e0e52f84cc2b190fe8f4