- Distribution Method : Unknown
- MD5 : 3309c946553cb863539e95cd088341dd
- Major Detection Name : Trojan-Ransom.Win32.Spora.fbx (Kaspersky), Ransom.BlackRouter (Malwarebytes)
- Encrypted File Pattern : .SF
- Payment Instruction File : READ ME.txt
- Major Characteristics :
- Offline Encryption
- BlackHeart / BlackRouter Ransomware series
- Disable system restore (vssadmin.exe delete shadows /all /quiet)
List