- Distribution Method : Remote access through Remote Desktop Protocol(RDP) or Terminal Services
- MD5 : 6d9063338f99efb5c774de8431fa779b
- Major Detection Name : Gen:Variant.Ransom.Cryak.38 (BitDefender), Ransom.Drakosh (Malwarebytes)
- Encrypted File Pattern : email-drakosha_new@aol.com.ver-CL 1.3.1.0.id-@@@@@<Random>-<Random>.randomname-<Random>.<Random>.<Random>
- Payment Instruction File : README.txt
- Major Characteristics : Offline Encryption
List