New Ransomware That Encrypts Only EXE Files on Windows Machines [source: gbhackers]

04 Sep 2018

No Comments

1643

A new ransomware that encrypts only EXE files present in your computer including the ones presented in the windows folder, which typically other ransomware won’t do to ensure the operating system function correctly.

It was first tweeted by MalwareHunterTeam and it has the title as Barack Obama’s Everlasting Blue Blackmail Virus Ransomware, according to its file properties. It is unknown how the attackers distributing the ransomware.

Sample: https://www.virustotal.com/en/file/0cd7440ca94d31212e21867439f38f0828823b76c94d566e81f5dfaf71574ebc/analysis/1534752542/ …@BleepinComputer @demonslay335 pic.twitter.com/mMfd8shBC8

According to Bleeping Computer analysis, it scans the computer for the presence of .exe files to make it unusable. It also terminates the process related with Antivirus such as Kaspersky, McAfee, and Rising Antivirus.

Generally ransomware will encrypt other media file’s such as docx, .xls, .doc, .xlsx, .ppt, .pptx, .odt, .jpg, .png, .jpeg, .csv and other to force the victim into making payment, Barack Obama’s Blackmail Virus Ransomware targets only the .EXE file.

For more, click here.