Ransomware information on Aug. 24 ~ 30, 2016

- Ransomware files : ef97df6f9b3.zip, 0f2b5d517eb4.zip, 5392e39ad5d.zip, 2d6cd31b551.zip,

b74a40257c6.zip, 965527b23f.zip, 6abb0220d677.zip, c94fab15a3.zip.

- Ransomware codes : audit report 1be2b342.js, card_cancellation_pdf 3ae5c5d1.js,

contract_2016-2017_pdf ~2ffa0f02.js, monthly_financial_scan e546c0d0.js,

monthly_report_pdf (`2c3d1d40).js, office_equipment ~3f50b1b6.js,

mortgage_documents.b0f3e480.wsf, commission_xls (~98ca4c3d).js

- Process : C:/Windows/System32/rundll32.exe

- Remarks : The attack which is using the noraml rundll32.exe in System32 folder.

- It is possible to real-time block by TrojanCut