Description
Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.
4ba36ecc13f6b08e1523fa7f8fd228b739d1f6918c5c7f9779c536b91dbb3def
31MB
210707-eetm352lh6
5e522e76e656ec090c8555b61fbcf226
6248d98b60c13b2d89caaa8059d29d4183616047
4ba36ecc13f6b08e1523fa7f8fd228b739d1f6918c5c7f9779c536b91dbb3def
b1f4a0f0aea64ab76d0635fac5d159a2dd9df73f0944b0bafb66d6bec16e6887e5c412334ffe7418d2609df07ab5732f8fd4c387181d5c33465f499d86c7a2d4
4ba36ecc13f6b08e1523fa7f8fd228b739d1f6918c5c7f9779c536b91dbb3def
5e522e76e656ec090c8555b61fbcf226
31MB
6248d98b60c13b2d89caaa8059d29d4183616047
4ba36ecc13f6b08e1523fa7f8fd228b739d1f6918c5c7f9779c536b91dbb3def
b1f4a0f0aea64ab76d0635fac5d159a2dd9df73f0944b0bafb66d6bec16e6887e5c412334ffe7418d2609df07ab5732f8fd4c387181d5c33465f499d86c7a2d4
Ransomware family first created in 2016. Named based on wallpaper set after infection in the early versions.
Ransomware generally changes the extension on encrypted files.
Infostealers often target stored browser data, which can include saved credentials etc.