- Distribution Method : Unknown
- MD5 : d0c47bd4b16f5c77ef114004b6b464b0
- Major Detection Name : Ransom:Win32/Genasom (Microsoft), Ransom_CRYPTOMIX.H (Trend Micro)
- Encrypted File Pattern : <Random Filename>.SERVER
- Malicious File Creation Location : C:\ProgramData\<Random>.exe
- Payment Instruction File : _HELP_INSTRUCTION.TXT
- Major Characteristics :
- Offline Encryption
- CryptFile2 / CryptoShield / HydraCrypt / Mole / Revenge / Zeta Ransomware series
List