- Distribution Method : Unknown
- MD5 : 7d03b3df047df9656d4e68708c021864
- Major Detection Name : Ransom.Oled (Malwarebytes), Ransom:Win32/Phobos.PB!MTB (Microsoft)
- Encrypted File Pattern : .[<Random>].[antiransomware@aol.com].makop
- Malicious File Creation Location : C:\Users\%UserName%\Desktop\readme-warning.txt
- Payment Instruction File : readme-warning.txt
- Major Characteristics :
- Offline Encryption
- Disable system restore (vssadmin delete shadows /all /quiet, wmic shadowcopy delete, bcdedit /set {default} bootstatuspolicy ignoreallfailures, bcdedit /set {default} recoveryenabled no, wbadmin delete catalog -quiet)
List