- Distribution Method : Unknown
- MD5 : 1c2aad639cc0b652cf99a662abd2aba7
- Major Detection Name : Ransom.Mamo (Malwarebytes), Ransom.HiddenTear!g1 (Norton)
- Encrypted File Pattern : .TMTEAM
- Payment Instruction File : @Lütfen Beni Oku!@.txt / @TMTeam@.png
- Major Characteristics :
- Offline Encryption
- The Turkish users are targeted.
- Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\wallpaper.bmp)
List