- Distribution Method : Unknown
- MD5 : 44de0bc5374f7dead918e13fe31887f4
- Major Detection Name : Ransom:Win32/Thancrypt.A (Microsoft), Ransom_CRYPMIC.KC (Trend Micro)
- Encrypted File Pattern : .THANATOS
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\<Random Number>\<Random Number>.exe
- Payment Instruction File : README.txt
- Major Characteristics :
- Offline Encryption
- Requests payment in BTC / ETH / BCH crypto currency
List