[Mosh]

MD5: 1105c4df3562b7ac9aaa3bf6037397c9
SHA1: 5abd5e024b85078b9060e4eb75c9fc9c7549ad55
Detection: 27 / 46
https://www.virustotal.com/es/file/efd8 ... 365137906/

[EP_X0FF]

Low budget Russian ransomware made by script-kiddies.

WinRAR SFX -> WinRAR SFX (with password) -> Ransom -> NSPack -> MSVC.

In attach unpacked. Unlock code: 7u

For code check see @00401EAE.

That's how it looking, since this ransomware is using ANSI API to draw text all cyrillic symbols screwed up in your screenshot.

[Mosh]

Thanks for your feedback EP_X0FF, this info is very useful for my analysis.