- Distribution Method : Unknown
- MD5 : 5a9e1d30bc1a42a4059030effabd64f1
- Major Detection Name : Generic.Ransom.Spora.16E4553A (BitDefender), Ransom:MSIL/Ryzerlo.A (Microsoft)
- Encrypted File Pattern : .ESCANOR
- Payment Instruction File : HELP_DECRYPT_YOUR_FILES.txt
- Major Characteristics :
- Offline Encryption
- Turns on User Access Control (UAC)
- Disable system restore (vssadmin.exe delete shadows /all /quiet)
List