- Distribution Method : Unknown
- MD5 : 78ca4efe15d4e791d0a668f6fe06a1e9
- Major Detection Name : Ransom.GlobeImposter (Malwarebytes), Ransom_FAKEGLOBE.L (Trend Micro)
- Encrypted File Pattern : .hNcrypt
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
List