- Distribution Method : Remote access through Remote Desktop Protocol(RDP) or Terminal Services
- MD5 : ee81496d64ef1d468709c741a02c0c0b
- Encrypted File Pattern : .<5~10-Digit Random Extension>
- Payment Instruction File : <Encryption Extension>-readme.txt
- Major Characteristics :
- Offline Encryption
- AnteFrigus / GandCrab Ransomware series
- Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\<Random>.bmp)
List