- Distribution Method : Mail attachment
- MD5 : 705236cc653e76f7051764a03458b684
- Major Detection Name : Generic.Ransom.GlobeImposter.F669A298 (BitDefender), Ransom_FAKEGLOBE.SMALY0 (Trend Micro)
- Encrypted File Pattern : .3ncrypt3d
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
List