Ranstop stops zero-day, script-based Spora variant – TEMASOFT Lab Demo

Case subject – A zero-day Spora variant packed as a command line script Today’s test uses a zero-day variant of Spora, disguised as a command line script. The file is distributed via email campaigns and, on execution, starts Microsoft Word and launches a background process that performs the actual encryption. At the time of the […]

Ranstop anti-ransomware stops WannaCryptor v2 – TEMASOFT Lab Demo

Case subject: WannaCryptor(WannaCry) v2 – (Virustotal details) Following up on the massive WannaCrypt attack, we have tested TEMASOFT Ranstop against several variants and recorded the test against the newest version- WannaCryptor v2. This version still spreads via email campaigns and combines the ransomware payload with worm spreading capabilities, but it uses a different command and […]

Ranstop anti-ransomware defends against over-the-network attack by Satana ransomware – Temasoft Lab Demo

Case subject – A Satana variant (Virustotal details) In this scenario, the ransomware attack comes over the network via mapped drives. There are two computers involved: one running the Satana variant, without any protection installed and having a mapped drive to the second computer; the second computer does not run any ransomware code and has […]

Ranstop anti-ransomware protects files against a “RAA” variant – Temasoft Lab Demo

Case subject – A “RAA” variant (JavaScript-based) (Virustotal details) This live ransomware test focuses on a RAA variant to determine how effective TEMASOFT Ranstop is at tackling elusive JavaScript-based ransomware. The RAA ransomware variants have been around since mid-2016, but it still manages to elude a good number of anti-virus engines. It gets delivered to […]

Ranstop protects files against the “.Osiris” variant of Locky – Temasoft Lab Demo

Case subject – A Locky variant nicknamed “.Osiris” (Virustotal details) For this test, the TEMASOFT Research Lab Team let loose one of the latest Locky variants, which features many improvements regarding speed, obfuscation, and strength of the cryptography. The malware uses multiple processes to ensure coverage for as many files as possible and usually gets […]

Ranstop blocks Spora ransomware and restores affected files, while most anti-virus products fail to detect this new ransomware – Temasoft Lab Demo

Case subject – Spora “replacer” ransomware (Virustotal details) For today’s exercise, the Temasoft Research Lab Team focused on a new and intriguing ransomware variant: Spora. This ransomware is interesting because it is what the security community calls a “replacer,” exhibiting a different and more complex behavior than typical ransomware. We have run the malware sample […]

Ranstop blocks a Graftor screen locker ransomware variant – Temasoft Lab Demo

Case subject – A Graftor screen locker variant (Virustotal details) Following up on the Beta 2 release of TEMASOFT Ranstop, featuring screen locker protection, our Research Lab Team staged a demo to assess the effectiveness of the new security feature. For this exercise, we got hold of a Graftor screen locker variant to tested out […]

Ranstop blocks a CryptoLocker variant – Temasoft Lab Demo

Case subject – A CryptoLocker variant (Virustotal details) During this test, the TEMASOFT Research Lab Team used an isolated network to run a live ransomware. The payload is a variant of CryptoLocker that arrives as an executable which displays a standard “folder” icon, to trick users into clicking on it. Once clicked the executable asks […]