Ransomware
MedusaLocker
aka AKO Ransomware · AKO Doxware · MedusaReborn
A Windows ransomware that will run certain tasks to prepare the target system for the encryption of files.
MedusaLocker, also known as AKO Ransomware, AKO Doxware, MedusaReborn, is a Windows ransomware.
Background
A Windows ransomware that carries out preparatory tasks on a target system before encrypting its files. MedusaLocker steers clear of executable files, most likely so the victim's machine stays functional enough to pay the ransom. It combines AES with RSA-2048 and has been reported to append extensions including .encrypted, .bomber, .boroff, .breakingbad, .locker16, .newlock, .nlocker, and .skynet.
Source: Malpedia (Fraunhofer FKIE).