- Distribution Method : Unknown
- MD5 : 949c438e4ed541877dce02b38bf593ad
- Major Detection Name : Ransom:Win32/Trinity.ATR!MTB (Microsoft), Ransom.Win32.TWOTHREELOCK.THEOCBD (Trend Micro)
- Encrypted File Pattern : .trinitylock
- Malicious File Creation Location : C:\Windows\<Number>.hta
- Message File : <Number>.hta / README.txt
- Major Characteristics :
- Offline Encryption
- Venus Ransomware series
- Empty the trash.
List