W32/Thgil.8CD8!tr.ransom

description-logoAnalysis



W32/Thgil.8CD8!tr.ransom is a detection for Ransomware trojan.
Below are some of its observed characteristics/behaviours:

  • This is a 32bit version for the Ransomware which has the same characteristics/behaviours as 64bit version : W64/Thgil.8CD8!tr.ransom.




recommended-action-logoRecommended Action

  • Make sure that your FortiGate/FortiClient system is using the latest AV database.
  • Quarantine/delete files that are detected and replace infected files with clean backup copies.

Telemetry logoTelemetry

Detection Availability

FortiGate
Extended
FortiClient
Extreme
FortiAPS
FortiAPU
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2018-12-18 64.98900 Sig Updated
2018-12-17 64.96500 Sig Updated