- Distribution Method : Unknown
- MD5 : 5307a6264358732f526e281da839ea84
- Major Detection Name : Trojan-Ransom.Win32.Crypren.aecf (Kaspersky), Ransom_SITER.A (Trend Micro)
- Encrypted File Pattern : .crypted
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\RANSOM.png
- Major Characteristics :
- Offline Encryption
- The French users targeted
- Changes desktop background (%Temp%\wallpaper.bmp)
List