- Distribution Method : Unknown
- MD5 : 46a1325bb01e37e0ee2d2ba37db257f2
- Major Detection Name : TR/Encoder.svfgo (Avira), WinGo/Filecoder.AP (ESET)
- Encrypted File Pattern : .decaf
- Payment Instruction File : README.txt
- Major Characteristics :
- Offline Encryption
- Use a "Microsoft Windows" Digital Signatures
- Interrupt file recovery using cipher.exe /w:<Drive Letter>:\
List