- Distribution Method : Unknown
- MD5 : 74257f66ac9e43b15b98ee7166f8bdc7
- Major Detection Name : DeepScan:Generic.Ransom.WCryG.F2ADA813 (BitDefender), Ransom_OOPS.A (Trend Micro)
- Encrypted File Pattern : .oops
- Malicious File Creation Location :
- C:\ProgramData\oops\EncryptedFiles.txt
- C:\ProgramData\oops\EncryptedKey
- C:\ProgramData\oops\KeyHash
- C:\ProgramData\oops\oops.exe
- Major Characteristics :
- Offline Encryption
- Block processes execution (Microsoft.Exchange.* / MSExchange.* / sqlserver.exe / sqlwriter.exe / mysqld.exe)
List