Lab

Ranstop protects against a GlobeImposter variant (.725)

Test subject – GlobeImposter ransomware

This GlobeImposter ransomware is delivered as a java script via email campaigns and bypasses classic antivirus detection technologies. It has been maintaining a very low detection rate on Virustotal.com for several days. At the time of our live test, this variant was a top contributor to the latest ransomware incidents, according to the Bleeping Computer website, and less than 20% of the Virustotal.com listed solutions detect this variant based on its signature.

GlobeImposter ransomware test facts

Upon execution of the javascript, it downloads and executes the ransomware payload. Upon execution, it verifies if the computer was previously infected or not by searching for a specific file. The ransomware will not continue if the file is found, signaling a previous infection. Next, it adds autorun registry values, reads system information and starts encrypting the files, adding the .725 extension. At the same time, it deletes the shadow copies of the files so that they cannot be recovered using the Volume Shadow Copy service.

GlobeImposter ransomware test results

TEMASOFT Ranstop detects this ransomware variant in seconds. Upon detection, it sends an alert and quarantines the malicious process, while starting the recovery process in the background. All files attacked during this live ransomware infection were successfully recovered.


Click here to watch TEMASOFT Ranstop in action (video)!

Virustotal details

About TEMASOFT Ranstop

TEMASOFT Ranstop is an anti-ransomware software that detects present and future ransomware, based on file access pattern analysis with a high degree of accuracy. At the same time, it protects user files so that they can be restored in case of malware attacks or accidental loss.

For more information, follow us on social media and subscribe to our newsletter.

This post was last modified on August 21, 2023 7:27 am

Peter Erdos

Share
Published by
Peter Erdos
Tags: ranstop

Recent Posts

The Role of File Monitoring Solutions in Maintaining File Integrity

In the digital world, information is often stored and transferred through files. From the most…

May 12, 2023

Guide to Conducting an Efficient File Access Permissions Audit for Admins and Technology Managers

Introduction Data security is more important than ever in today's fast-paced digital world. One critical…

April 9, 2023

File Integrity Monitoring: What It Is and Why It Matters

Introduction: Cyber threats are a growing concern for businesses and individuals alike. With the increasing…

March 5, 2023

Monitoring Essential Microsoft IIS Server Configuration Files for Enhanced Security

Microsoft Internet Information Services (IIS) is a popular web server that is widely used to…

February 25, 2023

Tracking file changes helps admins solve server configuration problems

File tracking is an important aspect of server administration, and it can help administrators detect…

February 1, 2023

Three reasons why admins should use file monitoring solutions

File monitoring solutions are essential tools for administrators to manage and protect their organizations' data…

January 6, 2023