- Distribution Method : Unknown
- MD5 : b40614afcdefd80d80d49ea9247d6186
- Major Detection Name : Generic.Ransom.DCRTR.392AFADF (BitDefender), Ransom:Win32/Higuniel.A (Microsoft)
- Encrypted File Pattern : .cryptes
- Malicious File Creation Location :
- C:\Users\%UserName%\AppData\Roaming\Windows Defender
- C:\Users\%UserName%\AppData\Roaming\Windows Defender\Monitors.exe
- C:\Users\%UserName%\Desktop\HOW TO DECRYPT ALL MY FILES.txt
- C:\Users\%UserName%\Desktop\infos.hta
- Payment Instruction File : HOW TO DECRYPT ALL MY FILES.txt / infos.hta
- Major Characteristics : Offline Encryption
List