SOME WINDOWS API FUNCTIONS USED BY RANSOMWARE
In this post, I summarized some popular windows API functions used by Ransomware.
You can find in this post some popular Windows API functions used frequently by Ransomware:
RANSOMWARE
********************
-- CryptAcquireContextA
-- EncryptFileA
-- CryptEncrypt
-- CryptDecrypt
-- CryptCreateHash
-- CryptHashData
-- CryptDeriveKey
-- CryptSetKeyParam
-- CryptGetHashParam
-- CryptSetKeyParam
-- CryptDestroyKey
-- CryptGenRandom
-- DecryptFileA
-- FlushEfsCache
-- GetLogicalDrives
-- GetDriveTypeA
-- CryptStringToBinary
-- CryptBinaryToString
-- CryptReleaseContext
-- CryptDestroyHash
What's Your Reaction?
![[Security Brief] - P16 - DoubleClickjacking: A New Clickjacking Attack](https://lepuchin.com/uploads/images/image_750x415_677943a1332cb.jpg)
![[CyberChats: Palkia & Charmander] - Season B - P8 - Baseline Security Controls](https://lepuchin.com/uploads/images/image_750x415_6692e1959612c.jpg)
![[Security Brief] - P12 - Fragment Attack](https://lepuchin.com/uploads/images/image_750x415_657fb81c697c7.jpg)
![[CyberChats: Palkia & Charmander] - Season A - P1 - Access Control](https://lepuchin.com/uploads/images/image_750x415_65355910438ac.jpg)
