- Distribution Method : Unknown
- MD5 : 22b66d1928db181ac6e6d6af7ea6bd8f
- Major Detection Name : Trojan.Ransom.CryPy (ALYac), Ransom:Python/Crypy.A (Microsoft)
- Encrypted File Pattern : <Random>.sad
- Malicious File Creation Location: : C:\Users\%UserName%\AppData\Local\Temp\<Random>.exe
- Payment Instruction File : SADStory_README_FOR_DECRYPT.txt
- Major Characteristics : CryPy Ransomware Families, Python based Ransomware, Create "__SAD STORY FILES__" folder in encryption target folder to save encrypted file, delete original file. Encrypts only files in download / document / other partitions.
List