- Distribution Method : Unknown
- MD5 : 671ad98a0e0c83defa386673bed208c4
- Major Detection Name : Gen:Heur.Ransom.REntS.Gen.1 (BitDefender), Ransom:MSIL/SpintJokCrypt.PB!MTB (Microsoft)
- Encrypted File Pattern : .SplinterJoke
- Malicious File Creation Location : C:\Users\%UserName%\Desktop\ransom_note.txt
- Payment Instruction File : ransom_note.txt
- Major Characteristics :
- Offline Encryption
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
- Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\desktop.jpg)
List