- Distribution Method : Unknown
- MD5 : de4f1da3295a3532430936235390345b
- Major Detection Name : Trojan/Win32.Cryptolocker.R200996 (AhnLab V3), Ransom_CRYPICH.SMA (Trend Micro)
- Encrypted File Pattern : .<Original Extension>-email-black.mirror@qq.com.oled
- Malicious File Creation Location :
- C:\Program Files (x86)\AEE9-E85A
- C:\Program Files (x86)\<Random>.exe
- C:\Users\%UserName%\AppData\Local\Temp\<Random>.exe
- Payment Instruction File : README.txt
- Major Characteristics : Offline Encryption
List