- Distribution Method : Unknown
 
 - MD5 : 2cdf5cc39eaeaf39f6a50c4ef755a04f
 
 - Major Detection Name : Ransom:Win32/Bitpaymer (Microsoft), Ransom.BTCware (Norton)
 
 - Encrypted File Pattern : .LOCK
 
 - Payment Instruction File : HOW_TO_DECRYPT.txt
 
 - Major Characteristics :
 - Offline Encryption
 - Disable system restore (vssadmin Delete Shadows /All /Quiet) 
 
					List