- Distribution Method : Mail attachment
- MD5 : fbdafc0722f9aa94872b9cf8f2a9087b
- Major Detection Name : Ransom:Win32/Ergop.B (Microsoft), Ransom_PURGE.SMQ (Trend Micro)
- Encrypted File Pattern : .vdul
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
List