Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

Titan Cryptor v0.2 Ransomware (<Original Filename>.<5-Digit Random Extension>)

  • Distribution Method : Unknown
  • MD5 : 2243c067ed2c016e6d0688ec7dc60b3b
  • Major Detection Name : a variant of MSIL/Filecoder.QE (ESET), Ransom_Crypmodadv.R020C0OK818 (Trend Micro)
  • Encrypted File Pattern : <Original Filename>.<Original Extension> → <Original Filename>.<5-Digit Random Extension>
  • Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\decryption
  • Payment Instruction File : Titan Instructions.html
  • Major Characteristics :
     - Offline Encryption
     - Argus Ransomware series
     - Kraken Cryptor Ransomware impostor
     - Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\wallpaper.bmp)