Ransomware information on Jul. 27, 2016

- File : bcd116e1fb.zip
15E86_email ID.zip
email ID_7F97042.zip

- Ransomware : meeting –DB33-..wsf
activities –C382-..wsf
activities –AF4-..wsf

- Process : C:/Users Account name/AppData/Local/Temp/CUnRFVGwbJUc.exe
C:/Users Account name/AppData/Local/Temp/xPrkdTAg4GheIq0.exe
C:/Users Account name/AppData/Local/Temp/cZUZcPILn6.exe

- It is possible to real-time block by TrojanCut.

- Remarks : C&C Server was changed on every attack.