This is all about malware analysis, reverse engineering and some cool stuff

Monday, 6 June 2016

Analysis of Ransomware spread by JavaScript

Summary: The sample is a JavaScript file, after execution it downloads BAT file and EXE file to run, traverse computer files and encrypts 80 kinds of extension format files including documents, pictures, media and etc. After the encryption, it ask for 0.5 BTC to decrypt the files. The malware author...