- Distribution Method : Unknown
- MD5 : dc6af3a3d11723cf4dd6c88e4d00ab27
- Major Detection Name : a variant of Win32/KillFiles.NEX (ESET), Ransom_EBWALL.A (Trend Micro)
- Encrypted File Pattern : .ebay
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Local\Temp\ebay-was-here
- Payment Instruction File : ebay-msg.html
- Major Characteristics : After the file encryption overwrites empty disk space to make impossible to restore files
List