- Distribution Method : Unknown
- MD5 : 4b38b574edce215101c0c7dd9f3d2c63
- Major Detection Name : Ransom.MyLittleRansomware.dropper (AVG), Ransom_NARLAN.A (Trend Micro)
- Encrypted File Pattern: <Random Filename>.LanRan
- Malicious File Creation Location :
- C:\Users\%UserName%\AppData\Local\Temp\IXP000.TMP\lan.exe
- C:\Users\%UserName%\AppData\Local\Temp\IXP000.TMP\pic.exe
- Major Characteristics: Offline Encryption, Encrypts only files located in Desktop, Encryption guide using text-to-speech (TTS) function, Changes Desktop Background(C:\Users\%UserName%\AppData\Roaming\img.jpg)
List