- Distribution Method : Unknown
- MD5 : 2ffcd2d62a573293c8679bfd606677b5
- Major Detection Name : Gen:Heur.Ransom.HiddenTears.1 (BitDefender), Ransom-Nitro!2FFCD2D62A57 (McAfee)
- Encrypted File Pattern : .cypress
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Local\Temp\<Random>.exe
- Offline Encryption
- Changes desktop background (C:\Users\%UserName%\AppData\Roaming\wallpaper.png)
List