- Distribution Method : Unknown
- MD5 : bf361b8decee605e70151028d7e0c848
- Encrypted File Pattern : .hos
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\winhos.exe
- Major Characteristics :
- Offline Encryption
- Developed by a Korean
- Disable Command Prompt (cmd.exe) and Task Manager (Taskmgr.exe)
- Requires the Heroes of the Storm game play for 1 hour
List