[SecList]A malicious pairing of cryptor and stealer

[igor51]

A malicious pairing of cryptor and stealer

After a successful infection, RAA executes its main task, i.e. encrypts the user's files. However, it doesn't stop there: some versions of RAA also include a Pony Trojan file, which steals confidential information from the infected computer.
Source: A malicious pairing of cryptor and stealer