- Distribution Method : Unknown
 
 - MD5 : 671ad98a0e0c83defa386673bed208c4
 
 - Major Detection Name : Gen:Heur.Ransom.REntS.Gen.1 (BitDefender), Ransom:MSIL/SpintJokCrypt.PB!MTB (Microsoft)
 
 - Encrypted File Pattern : .SplinterJoke
 
 - Malicious File Creation Location : C:\Users\%UserName%\Desktop\ransom_note.txt
 
 - Payment Instruction File : ransom_note.txt
 
 - Major Characteristics :
 - Offline Encryption
 - Disable system restore (vssadmin.exe Delete Shadows /All /Quiet)
 - Changes desktop background (C:\Users\%UserName%\AppData\Local\Temp\desktop.jpg) 
 
					List