- Distribution Method : Unknown
- MD5 : eda7a7ba292b3c84b4d0c76757dfa65e
- Major Detection Name : MSIL:Filecoder-AC [Trj] (Avast), Ransom.HiddenTear!g1 (Norton)
- Encrypted File Pattern : .jbkubZcJIdUb
- Payment Instruction File : READ_IT.html
- Major Characteristics :
- Offline Encryption
- SHIVA Open Source based Ransomware
- Developed by a Korean
List