- Distribution Method : Unknown
- MD5 : 5b28bff568f801d51a85df54760930bc
- Major Detection Name : TR/AD.RansomHeur.cgljf (Avira), Ransom:Win32/Ergop.B (Microsoft)
- Encrypted File Pattern : .paycyka
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
List