Analysis of LooCipher, a New Ransomware Family Observed This Year

Analysis of LooCipher, a New Ransomware Family Observed This Year. McAfee Team discovered a new ransomware family with distinct features. It was delivered through a DOC file with a simple social engineering technique - "Enable macros". The ransomware uses AES-ECB encryption algorithm with the same key for all files, facilitating recovery. It avoids encrypting 3 special system folders and searches for various file extensions, including non-Windows formats like ".dmg.