CryptoNar (10f92054-b028-11e8-a51f-2f82236ac72d)
When the CryptoNar, or Crypto Nar, Ransomware encrypts a victims files it will perform the encryption differently depending on the type of file being encrypted. If the targeted file has a .txt or .md extension, it will encrypt the entire file and append the .fully.cryptoNar extension to the encrypted file's name. All other files will only have the first 1,024 bytes encrypted and will have the .partially.cryptoNar extensions appended to the file's name.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| CryptoJoker (2fb307a2-8752-4521-8973-75b68703030d) | Ransomware | CryptoNar (10f92054-b028-11e8-a51f-2f82236ac72d) | Ransomware | 1 |