- Distribution Method : Unknown
- MD5 : 1d1a5be1aa6596a3816a2fc7ce6a994b
- Major Detection Name : Generic.Ransom.SamSam.468F90FF (BitDefender), Trojan-Ransom.MSIL.Samas.f (Kaspersky)
- Encrypted File Pattern : .JayTHL
- Payment Instruction File : FuckYouJayTHL_HELP_ENCRYPTED_FILES.TXT
- Major Characteristics :
- Offline Encryption
- Terminates a specific processes
- Disable system restore (vssadmin delete shadows /all /quiet)
List