- Distribution Method : Unknown
- MD5 : 41f1351cd1f7ff25126ab02b9abcf3b7
- Major Detection Name : Ransom:Win32/Ergop.A (Microsoft), Ransom_FAKEGLOBE.ENI (Trend Micro)
- Encrypted File Pattern : .crypt
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- The Russian users targeted
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
List