App Review Spora Ransomware

[cruelsister]

 

[Duotone]

Zero-day... and you already got a sample

 

[Solarquest]

Any chance you post it on the HUB for us to test it?

 

[HarborFront]

Can AppCheck block it?

 

[cruelsister]

Yes it does. Actually I ran the malware initially on a system with AppCheck on it- the encryption process was detected and prevented.

 

[_CyberGhosT_]

Yes it does. Actually I ran the malware initially on a system with AppCheck on it- the encryption process was detected and prevented.

+1 for little known AppCheck, nice job

 

[Solarquest]

I just run Appcheck free with default settings in an older VM and .jpgs were encrypted...

 

[Zero Knowledge]

Nice video. Thanks!

 

[Solarquest]

Appcheck 2.0.2.0.20 missed it
Appcheck 2.0.0.20 blocked it.

 

[cruelsister]

Yeah- the current AppCheck version (build 20) that was released a few days prior to the release of this ransomware detected the encryption routine totally.