Free Ransomware Available on Dark Web

Free Ransomware Available on Dark Web
https://securingtomorrow.mcafee.com/mcafee-labs/free-ransomware-available-dark-web/

Indicators of Compromise
Hashes:

cb73927aa749f88134ab7874b15df898c014a35d519469f59b1c85d32fa69357
0622fcb172773d8939b451c43902095b0f91877ae05e562c60d0ca0c237a2e9c
IP address:

hxxp://kdvm5fd6tn6jsbwh.onion
Files created:

C:\Users\<username>\AppData\Roaming\uuid_file
C:\Users\<username>\AppData\Roaming\lock_file
C:\Users\<username>\AppData\Roaming\encryption_key
C:\Users\< username >\Desktop\HOW_TO_DECRYPT_FILES.html
Encryption extension:

.cypher
References:

https://www.virustotal.com/en/file/0622fcb172773d8939b451c43902095b0f91877ae05e562c60d0ca0c237a2e9c/analysis/