RM1605, 26, Seongsuil-ro 10-gil, Seongdong-gu, Seoul, ROK l Tel :822-3448-0880 l Fax : 822-3448-0804 l Email : jsshim@truecut.co.kr
Copyright (C) 2015 TrueCut Security, Inc. All Right Reserved.
| Title | Today's Ransomware - THOR | ||||
|---|---|---|---|---|---|
| Name | Operator | Date | 2016-10-25 | View | 1222 |
| File | Today ransomware_thor.pdf |
||||
|
It is a VB Script file and call a rundll32 process to attack. The extension of files being attacked ware changed to "thor". C & C server IP is in Russia. It is not known, nevertheless TrojanCut blocked it. |
|||||