- Distribution Method : Unknown
- MD5 : 5db3c408aea8a40ed5c662eeef3fd3ed
- Major Detection Name : Trojan.Ransom.Scarab (ALYac), Trojan:Win32/Tiggre!plock (Microsoft)
- Encrypted File Pattern : .emsisosisoft
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HOW TO RESTORE ENCRYPTED FILES.TXT
- Payment Instruction File : HOW TO RESTORE ENCRYPTED FILES.TXT
- Major Characteristics :
- Offline Encryption
- File encryption using "C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe"
List