Ransomware information on Jul. 25, 2016

- File : email ID_C90EE7A.zip
4AF358_email ID.zip

- Content : sales report 4c4.wsf
sales report a67.wsf

- Process : C:/Users Account name/AppData/Local/Temp/UmUfyXxfu33IG.exe
C:/Users Account name/AppData/Local/Temp/jqOHQHYzZ.exe

- It is possible to real-time block by TrojanCut.

- Remarks : C&C Server was changed on every attack.