- Distribution Method : Unknown
- MD5 : acff55cf4665f9412fc6951b89a0d33f
- Major Detection Name : Gen:Variant.Ransom.Blind.1 (BitDefender), Ransom_BLIND.C (Trend Micro)
- Encrypted File Pattern : .[skeleton@rape.lol].skeleton
- Payment Instrucition File : How_Decrypt_Files.txt
- Major Characteristics :
- Offline Encryption
- Block processes execution (oracle.exe, sqlservr.exe)
- Disable system restore (bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures)
List