- Distribution Method : Unknown
- MD5 : 62c2aaf974ea6d5ff2c1af56fa4afe86
- Major Detection Name : Gen:Heur.Ransom.HiddenTears.1 (BitDefender), Ransom_HiddenTearKee.A (Trend Micro)
- Encrypted File Pattern : <Original Filename>.<Original Extension>@kee
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msceInter.exe
- Payment Instruction File : Hello There! Fellow @kee User!.txt
- Major Characteristics :
- Offline Encryption
- Changes desktop background (C:\Users\%UserName%\Desktop\wallpaper.png)
List