- Distribution Method : Unknown
- MD5 : 1c249309871bae43fe787df7976df355
- Major Detection Name : A variant of MSIL/Filecoder.CryptoJoker.D (ESET), MSIL/CryptoJoker.D!tr.ransom (Fortinet)
- Encrypted File Pattern : .fully.fucked / .partially.fucked
- Payment Instruction File : CAD Recovery Information.txt
- Major Characteristics :
- Offline Encrytion
- CryptoNar / ExecutionerPlus / JokerHourse Ransomware series
- .md, .txt file extensions are fully encrypted (.fully.fucked) and other file extensions are partially encrypted (.partially.fucked) only up to the 1,024 Bytes.
List