- Distribution Method : Unknown
- MD5 : c6fde4c3c72fbcb966434a727bef3775
- Major Detection Name : Win32/Filecoder.HydraCrypt.I (ESET), Ransom.Troldesh (Norton)
- Encrypted File Pattern : <Random Filename>.MOLE02
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\<Random>.exe
- Payment Instruction File : _HELP_INSTRUCTION.TXT
- Major Characteristics :
- Offline Encryption
- CryptFile2 / CryptoMix / CryptoShield / Revenge / Zeta Ransomware series
- Create a fake "Display Color Calibration" message
List