- Distribution Method : Unknown
 
 - MD5 : dc6af3a3d11723cf4dd6c88e4d00ab27
 
 - Major Detection Name : a variant of Win32/KillFiles.NEX (ESET), Ransom_EBWALL.A (Trend Micro)
 
 - Encrypted File Pattern : .ebay
 
 - Malicious File Creation Location : C:\Users\%UserName%\AppData\Local\Temp\ebay-was-here
 
 - Payment Instruction File : ebay-msg.html
 
 - Major Characteristics : After the file encryption overwrites empty disk space to make impossible to restore files
 
 
					List