- Distribution Method : Unknown
 
 - MD5 : 2ffcd2d62a573293c8679bfd606677b5
 
 - Major Detection Name : Gen:Heur.Ransom.HiddenTears.1 (BitDefender), Ransom-Nitro!2FFCD2D62A57 (McAfee)
 
 - Encrypted File Pattern : .cypress
 
 - Malicious File Creation Location : C:\Users\%UserName%\AppData\Local\Temp\<Random>.exe
 
  - Offline Encryption
 - Changes desktop background (C:\Users\%UserName%\AppData\Roaming\wallpaper.png)
 
					List