- Mar 15, 2017
- 58
TEMASOFT Ranstop - default configuration;
Sample: a Spora ransomware variant. Virus total sample details: Antivirus scan for cb83d46d30bc9b277c78efe7beb102d0f292cacc2380534fce9c7e4bb192134a at 2017-02-27 03:03:37 UTC - VirusTotal
Test OS: Windows 10
Spora is a “replacer” ransomware that fully encrypts the contents of the target files directly, without performing additional file operations. This means that while typical ransomware has a bigger footprint when it comes to file related activity (file read, file create, file write, file delete), replacers have a far smaller one: only read/write operations on the same file. Just like most production applications. This characteristic makes the replacers tough to detect and block.
TEMASOFT Ranstop blocks Spora and recovers the files.
Sample: a Spora ransomware variant. Virus total sample details: Antivirus scan for cb83d46d30bc9b277c78efe7beb102d0f292cacc2380534fce9c7e4bb192134a at 2017-02-27 03:03:37 UTC - VirusTotal
Test OS: Windows 10
Spora is a “replacer” ransomware that fully encrypts the contents of the target files directly, without performing additional file operations. This means that while typical ransomware has a bigger footprint when it comes to file related activity (file read, file create, file write, file delete), replacers have a far smaller one: only read/write operations on the same file. Just like most production applications. This characteristic makes the replacers tough to detect and block.
TEMASOFT Ranstop blocks Spora and recovers the files.