Elaboración de recomendaciones de buenas prácticas a partir del estudio de los principales tipos de malware Ransomware que han atacado en Ecuador a las estaciones de trabajo con sistema operativo Windows mediante análisis dinámico y estático.

Abstract

During the years 2015, 2016, 2017 there was an accelerated growth of families and variants of Ransomware, which infected end users and big corporations all around the world. Through research, a ranking of Ransomware threats in Ecuador was developed for Windows computers, of which, four samples were taken to be used for the analysis. Additionally, the proposed methodology based on SANS and MARE recommendations and the tools for the analysis are described. The static and Dynamic Analysis of the chosen samples is performed and the obtained results are exposed, which are the libraries' use of libraries, functions and resources, as well as the connections they make at the network level for the propagation of the infection. Also, a comparison of the study of one of the samples to one of a previous project is made. Finally, a best computer practice recommendations compendium is delivered with the purpose of preventing malware infection and mitigate the impact caused by them.