- Distribution Method : Unknown
 
 - MD5 : c6a2fb56239614924e2ab3341b1fbba5
 
 - Major Detection Name : Trojan/Win32.XData.C1961833 (AhnLab V3), Ransom_XDATA.A (Trend Micro)
 
 - Encrypted File Pattern : .~xdata~
 
 - Malicious File Creation Location :
     - C:\Users\%UserName%\AppData\Roaming\000<Random>.exe
     - C:\Users\%UserName%\AppData\Roaming\ms<Random>.exe 
 - Payment Instruction File : HOW_CAN_I_DECRYPT_MY_FILES.txt
 
 - Major Characteristics :
     - Offline Encryption
     - AES-NI Ransomware series
     - Generates additional malware (Information extortion) 
 
					リスト