Search
Keyword: ransom.win32.cring
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It connects to certain websites to send and receive
the user. It connects to certain websites to send and receive information. It deletes itself after execution. It encrypts files with specific file extensions. It drops files as ransom note. Arrival
files with specific extension Append an extension to encrypted files Drop ransom note Delete files in all drives Connect to a website to check IP address Gather information of affected computer Send
information. It encrypts files with specific file extensions. It encrypts files found in specific folders. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by
information. However, as of this writing, the said sites are inaccessible. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file
encrypts files found in specific folders. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users
drives and shares. It drops a ransom note in every directory that the malware had successfully encrypted. Ransomware Routine This Ransomware encrypts files with the following extensions: .zip .rar .7z .tar
affected system. It encrypts files with specific file extensions. It drops files as ransom note. Arrival Details This Ransomware arrives as an attachment to email messages spammed by other malware/grayware
This Ransomware may be dropped by other malware. Arrival Details This Ransomware may be dropped by the following malware: Ransom_Agent.R002C0OGU18 Stolen Information This Ransomware saves the stolen
affected system. It encrypts files with specific file extensions. It drops files as ransom note. Arrival Details This Ransomware arrives as an attachment to email messages spammed by other malware/grayware
connects to the following possibly malicious URL: http://{BLOCKED}.{BLOCKED}.25.185/key.php It does the following: It displays the following as its ransom note. Ransomware Routine This Ransomware encrypts
system. It drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Installation
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not
files}\{month}-{day}-{year}-INFECTION.TXT - ransom note {folders containing encrypted files}\{random number}.KEY %My Documents%\{random number}.txt - list of encrypted files (Note: %My Documents% is
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops files as ransom note. Arrival Details This
drops files as ransom note. Arrival Details This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Other Details
This Trojan may be downloaded by other malware/grayware from remote sites. It gathers certain information on the affected computer. Arrival Details This Trojan may be downloaded by the following
This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan Spy arrives on a system