| MD5 | a1e575581c4287c5900bb1a9860792bd | 
| SHA1 | 6c390f82fb25a37b31ef387c9a2fd6a31b5300eb | 
| Filename | -25_2_.exe | 
| Domains | [naturstein-schubert.de] [csskol.org] [casasembargada.com] [mahmutersan.com.tr] [forms.net.in] [kknk-shop.dev.onnetdigital.com] | 
| IP Addresses | [91.250.80.97] [160.153.51.192] [23.229.166.194] [176.9.2.244] | 
| Antivirus | [HW32.Packed.67DB] | 
| [Mal/Ransom-EO] | |
| [Ransom:Win32/Tescrypt!rfn] | |
| [Ransomware-FHO!A1E575581C42] | |
| [Ransom_CRYPTESLA.CA] | |
| [Ransom_r.GF] | |
| [Trojan-Ransom.Win32.Bitman.vpn] | |
| [Trojan.AVKill.61027] | |
| [Trojan.Win32.ZPACK.ebgomh] |