- Distribution Method : Unknown
- MD5: c088c3d3f95f388427ad0f1abc8c9d39
- Major Detection Name : Trojan.Ransom.Fantom (ALYac), Ransom_EDA2FANTOM.C (Trend Micro)
- Encrypted File Pattern : <Random>.<Number>
- Payment Instruction File : RESTORE-FILES.<Number>.txt
- Major Characteristics : Offline Encryption, Stop working in Russian OS, Changes desktop background(C:\Users\%UserName%\AppData\Local\Temp\<Number>.jpg)
List