Worm: Win32/Morto. B

Worm: Win32/Morto. B

What is Worm:Win32/Morto.B infection?

In this post you will certainly locate regarding the meaning of Worm:Win32/Morto.B and also its adverse effect on your computer. Such ransomware are a form of malware that is specified by on-line fraudulences to demand paying the ransom by a target.

In the majority of the instances, Worm:Win32/Morto.B virus will certainly instruct its targets to start funds move for the objective of neutralizing the amendments that the Trojan infection has actually presented to the target’s gadget.

Worm:Win32/Morto.B Summary

These alterations can be as adheres to:

  • Executable code extraction;
  • Attempts to connect to a dead IP:Port (1 unique times);
  • Performs some HTTP requests;
  • Ciphering the documents located on the victim’s hard drive — so the sufferer can no more utilize the data;
  • Preventing routine accessibility to the victim’s workstation;

Worm:Win32/Morto.B

The most normal channels whereby Worm:Win32/Morto.B are infused are:

  • By ways of phishing e-mails;
  • As an effect of customer winding up on a resource that hosts a malicious software application;

As soon as the Trojan is effectively infused, it will either cipher the information on the sufferer’s PC or protect against the device from working in an appropriate fashion – while also putting a ransom note that discusses the need for the victims to impact the settlement for the objective of decrypting the records or restoring the data system back to the preliminary condition. In the majority of instances, the ransom money note will show up when the client restarts the COMPUTER after the system has actually already been damaged.

Worm:Win32/Morto.B circulation networks.

In numerous edges of the world, Worm:Win32/Morto.B grows by leaps as well as bounds. However, the ransom money notes and techniques of obtaining the ransom quantity might vary depending upon particular neighborhood (local) setups. The ransom money notes and also methods of obtaining the ransom amount might vary depending on particular neighborhood (local) settings.

For instance:

    Faulty signals concerning unlicensed software.

    In specific locations, the Trojans often wrongfully report having actually discovered some unlicensed applications allowed on the victim’s device. The sharp after that demands the customer to pay the ransom money.

    Faulty declarations about unlawful content.

    In countries where software piracy is much less popular, this technique is not as reliable for the cyber fraudulences. Alternatively, the Worm:Win32/Morto.B popup alert might wrongly claim to be deriving from a police institution and also will report having located child pornography or various other illegal data on the gadget.

    Worm:Win32/Morto.B popup alert may falsely claim to be obtaining from a legislation enforcement establishment and also will report having located youngster porn or various other unlawful information on the tool. The alert will in a similar way contain a requirement for the customer to pay the ransom.

Technical details

File Info:

crc32: C70DB5E1md5: 44a9da51081b6215583d266589915eb9name: 44A9DA51081B6215583D266589915EB9.mlwsha1: d6a80107040bd361290bb8f8298ee3fef7c76f45sha256: ad2a6464e2505a6464aa809075a28da69cda9ed3ab866f4049561cc9272adfafsha512: 76653d3122cce059eeb940a4d64979ab3c6934b0e216853c7e174f363d93929ad9c1e959fa4b75fe78c18d41f6cc705daed8dbac69e9bb16d7270d0fde774861ssdeep: 768:tj6m7eCLZ4G2x0J3yAnDRhczVcDSAL39d:tjD7eCLZZp3yobAVcD139dtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Morto.B also known as:

GridinSoftTrojan.Ransom.Gen
CynetMalicious ()
ALYacGen:Variant.Ransom.Converton.8
CylanceUnsafe
SangforTrojan.Win32.Save.a
AlibabaWorm:Win32/Morto.db887673
Cybereasonmalicious.1081b6
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Morto.I
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Worm.Morto-274
KasperskyNet-Worm.Win32.Morto.s
BitDefenderGen:Variant.Ransom.Converton.8
NANO-AntivirusVirus.Win32.Gen.ccmw
ViRobotWorm.Win32.A.Net-Morto.26624.A
MicroWorld-eScanGen:Variant.Ransom.Converton.8
TencentWin32.Worm-net.Morto.Pdcr
Ad-AwareGen:Variant.Ransom.Converton.8
SophosMal/Morto-A
ComodoWorm.Win32.Morto.~B@4kbfnn
BitDefenderThetaGen:NN.ZexaF.34758.bmW@auBkXNj
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Morto2
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.Ransom.Converton.8
EmsisoftGen:Variant.Ransom.Converton.8 (B)
SentinelOneStatic AI – Suspicious PE
JiangminWorm/Morto.ch
WebrootW32.Rogue.Gen
AviraHEUR/AGEN.1100283
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.3F7983
KingsoftWin32.Troj.Generic_a.c.(kcloud)
MicrosoftWorm:Win32/Morto.B
AegisLabWorm.Win32.Morto.p!c
GDataGen:Variant.Ransom.Converton.8
TACHYONWorm/W32.Small.26624.K
AhnLab-V3Backdoor/Win32.Morto.R12082
McAfeeArtemis!44A9DA51081B
MAXmalware (ai score=100)
VBA32TScope.Malware-Cryptor.SB
PandaGeneric Malware
TrendMicro-HouseCallMal_Morto2
RisingTrojan.Generic@ML.94 (RDML:4e2N84vmbA86wIU0LatTqA)
YandexWorm.Morto!F5bfwiPTRY4
IkarusNet-Worm.Win32.Morto
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/MORTO.A!worm
AVGWin32:Malware-gen
Paloaltogeneric.ml
Maya Lin-Takahashi
Author

Maya Lin-Takahashi

Maya is a hardware enthusiast who tests and reviews smart home devices, smartphones, wearables, and audio gear. She focuses on practical consumer value and build quality.