- Distribution Method : Unknown
- MD5 : 1c249309871bae43fe787df7976df355
- Major Detection Name : A variant of MSIL/Filecoder.CryptoJoker.D (ESET), MSIL/CryptoJoker.D!tr.ransom (Fortinet)
- Encrypted File Pattern : .fully.fucked / .partially.fucked
- Payment Instruction File : CAD Recovery Information.txt
- Major Characteristics :
 - Offline Encrytion
 - CryptoNar / ExecutionerPlus / JokerHourse Ransomware series
 - .md, .txt file extensions are fully encrypted (.fully.fucked) and other file extensions are partially encrypted (.partially.fucked) only up to the 1,024 Bytes.
List