Matrix Ransomware

Targeted ransomware with information collection and encryption functionality.

Deletes shadow copies

Ransomware often targets backup files to inhibit system recovery.

Modifies boot configuration data using bcdedit

Drops file in Drivers directory

Executes dropped EXE

Modifies extensions of user files

Ransomware generally changes the extension on encrypted files.

Sets service image path in registry

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.