- Distribution Method : Unknown
- MD5 : 418da7a795c80e45775f822098e1e85b
- Major Detection Name : Generic.Ransom.Anubis.9E1830BF (BitDefender), Trojan-Ransom.Win32.Nubi.f (Kaspersky)
- Encrypted File Pattern : .[anubi@cock.li].anubi
- Payment Instruction File : __READ_ME__.txt
- Major Characteristics :
- Offline Encryption
- Disable system restore (vssadmin.exe delete shadows /all /quiet, bcdedit.exe /set {default} recoveryenabled no, bcdedit.exe /set {default} bootstatuspolicy ignoreallfailures)
- Attempts to uninstall Avira, ESET, Kaspersky and Windows Defender
List