Matrix Ransomware

Targeted ransomware with information collection and encryption functionality.

Deletes shadow copies

Ransomware often targets backup files to inhibit system recovery.

Drops file in Drivers directory

Executes dropped EXE

Modifies extensions of user files

Ransomware generally changes the extension on encrypted files.

Sets service image path in registry

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.