Understanding Crypto-Ransomware

[Nytro]

Understanding Crypto-Ransomware

Table of Contents
Executive Summary 3
Introduction 4
Dataset and Timeline 6
Analysis Methodology 8
Results 11
Droppers, anti-analysis and persistence 11
C&C communication 13
Encryption 15
Targeted file types 17
Payment options 20
Implementation, flaws and version evolution 22
Conclusion 24
References 26
Appendix A: Fake Cryptolocker C&C Server 28
and CryptDecrypt Hook
Appendix B: Fake Cryptowall C&C Server 30
Appendix C: Hooking WriteProcessMemory 32
About Bromium 35

Download: http://www.bromium.com/sites/default/files/bromium-report-ransomware.pdf