- Distribution Method: Unknown
- MD5 : 5a81958bcaffdbddac60f333d0a86bab
- Major Detection Name : Trojan-Ransom.Win32.Purga.b (Kaspersky), Ransom.Purge (Norton)
- Encrypted File Pattern : .nazarbayev
- Malicious File Creation Location: : C:\Users\%UserName%\AppData\Roaming\nazerke.exe
- Payment Instruction File : Read Me Please.hta
- Major Characteristics : 오프라인 암호화(Offline Encryption), Hidden-Tear 오픈 소스 기반 Ransomware, 러시아어(Russian) 사용자 표적
List