- Distribution Method : Unknown
- MD5 : 5a5db202a9d6515f30b25cd08ea6ca3e
- Major Detection Name : Gen:Heur.Ransom.HiddenTears.1 (BitDefender), Ransom:Win32/HiddenTear.PA!MTB (Microsoft)
- Encrypted File Pattern : .Sifrelendi
- Payment Instruction File : Dosyalarını Kurtarmak İstiyorsan Oku!!!.txt
- Major Characteristics :
- Offline Encryption
- The Turkish users are targeted.
- Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\wallpaper.bmp)
List