- Distribution Method : Unknown
 
 - MD5 : 41f1351cd1f7ff25126ab02b9abcf3b7
 
 - Major Detection Name : Ransom:Win32/Ergop.A (Microsoft), Ransom_FAKEGLOBE.ENI (Trend Micro)
 
 - Encrypted File Pattern : .crypt
 
 - Payment Instruction File : how_to_back_files.html
 
 - Major Characteristics :
 - Offline Encryption
 - Fake Globe / PSCrypt Ransomware series
 - The Russian users targeted
 - Disable system restore (vssadmin.exe Delete Shadows /All /Quiet) 
 
					List