#T1happy #Ransomware (2020-04-17)

QVM360

https://www.lanzous.com/ibibalg

https://www.virustotal.com/gui/file/27905e787ade5b874ba3648769f2123c47c27dad5c3b230d2738860064dec571/community

1. infected

复制代码

swizzer

智量
Heur.ML.PE.C

a233

Avast
Win32:Trojan-gen

Xw1nd极风

Norton
Heur.AdvML.C

a27573

ESET MSIL/Filecoder.RN

陌染淡殇

WD:   
Trojan:Win32/Occamy.C

54ss

Bitdefender
c:\users\ljsjo\desktop\r1.exe 是恶意软件 DeepScan:Generic.Ransom.Hiddentear.A.B011982D
名字真的太长了BEST双击
高级威胁防护已拦截一个恶意进程。进程路径: C:\Users\ljsjo\Desktop\r1.exe.

病毒探索者

Malwarebytes

病毒探索者

App Check

1. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\defexclist.txt,,Restored,RansomGuard
   
2. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\defexclist.txt,,Restored,RansomGuard
   
3. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\defexclist.txt.happy,,Removed,RansomGuard
   
4. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\defexclist.txt,,Removed,RansomGuard
   
5. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\downlWithIDM64.dll,,Removed,RansomGuard
   
6. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\grabber.chm,,Removed,RansomGuard
   
7. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmcchandler2_64.dll,,Removed,RansomGuard
   
8. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll,,Removed,RansomGuard
   
9. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll,,Removed,RansomGuard
   
10. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmindex.dll,,Removed,RansomGuard
    
11. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi,,Removed,RansomGuard
    
12. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmmzcc7.dll,,Removed,RansomGuard
    
13. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\IDMNetMon.dll,,Removed,RansomGuard
    
14. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\IDMOpExt.nex,,Removed,RansomGuard
    
15. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmtdi32.sys,,Removed,RansomGuard
    
16. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmvconv.dll,,Removed,RansomGuard
    
17. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmwfp32.sys,,Removed,RansomGuard
    
18. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\idmwfp64.sys,,Removed,RansomGuard
    
19. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\tips.txt,,Restored,RansomGuard
    
20. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\tips.txt,,Restored,RansomGuard
    
21. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\tips.txt.happy,,Removed,RansomGuard
    
22. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\tutor.chm,,Removed,RansomGuard
    
23. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\IDM Backup Manager\IDM Backup Manager.exe,,Removed,RansomGuard
    
24. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\idm_cht.lng,,Removed,RansomGuard
    
25. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\idm_fr.lng,,Removed,RansomGuard
    
26. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\idm_gr.lng,,Removed,RansomGuard
    
27. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\idm_hu.lng,,Removed,RansomGuard
    
28. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\idm_it.lng,,Removed,RansomGuard
    
29. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\inst_tr.lng,,Removed,RansomGuard
    
30. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_ar.txt,,Restored,RansomGuard
    
31. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_ar.txt,,Restored,RansomGuard
    
32. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_ar.txt.happy,,Removed,RansomGuard
    
33. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_ar.txt,,Removed,RansomGuard
    
34. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_de.txt,,Restored,RansomGuard
    
35. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_de.txt,,Restored,RansomGuard
    
36. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_de.txt.happy,,Removed,RansomGuard
    
37. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_de.txt,,Removed,RansomGuard
    
38. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_es.txt,,Restored,RansomGuard
    
39. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_es.txt,,Restored,RansomGuard
    
40. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_es.txt.happy,,Removed,RansomGuard
    
41. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_fa.txt,,Restored,RansomGuard
    
42. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_fa.txt,,Restored,RansomGuard
    
43. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_fa.txt.happy,,Removed,RansomGuard
    
44. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_fr.txt,,Restored,RansomGuard
    
45. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_fr.txt,,Restored,RansomGuard
    
46. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_fr.txt.happy,,Removed,RansomGuard
    
47. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_gr.txt,,Restored,RansomGuard
    
48. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_gr.txt,,Restored,RansomGuard
    
49. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_gr.txt.happy,,Removed,RansomGuard
    
50. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_hu.txt,,Restored,RansomGuard
    
51. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_es.txt,,Removed,RansomGuard
    
52. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_hu.txt,,Restored,RansomGuard
    
53. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_hu.txt.happy,,Removed,RansomGuard
    
54. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_id.txt,,Restored,RansomGuard
    
55. 04/18/2020 12:04:19 上午,Ransomware Behavior Detected,File,C:\Users\virus\Downloads\r1.exe,5b003545b7728b85f03d8b210cd6711b,Blocked,RansomGuard
    
56. 04/18/2020 12:04:19 上午,File Created by Ransomware,File,C:\Program Files (x86)\Internet Download Manager\Languages\tips_it.txt,,Restored,RansomGuard

复制代码

epattack

微点