- Distribution Method : Unknown
- MD5 : f2d708f9973991fcdd1fa2693fee0c8a
- Major Detection Name : Ransom.GlobeImposter (Malwarebytes), Ransom_FAKEGLOBE.AA (Trend Micro)
- Encrypted File Pattern : .s1crypt
- Payment Instruction File : how_to_back_files.html
- Major Characteristics :
- Offline Encryption
- Fake Globe / PSCrypt Ransomware series
- Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
List