|Short Description||This ransomware belongs to the crypto-locker family.|
|Symptoms||Victim may witness the wallpaper changed and some files will have custom extension and become Dos type URrl|
|Distribution Method||Via malicious Files, exploit kits and compromised URL’s.|
Once this ransomware infects the victim it creates a lot of files in the key folders. Such as %tem%,%appdata%,%roaming%.
It is found that some of the victim were able to contact the attacker and were able to lower the amount of ransom that was demanded for decrypting the files. This ransomware is available in the deep web even this ransomware is sold as a ransomware as a service.
This ransomware blocks the victim from accessing security websites.