CNH Ransomware encrypts user data and ask user to email him at helper.china@aol.com for ransom amount. CNH Ransomware or ChinaHelper Ransomware is written in Rust, an unsual language for this task.
.cnh extension is added to encrypted files.
CNH Ransomware Signatures
Family: Trojan:Win32/Ymacco.AA2A
MD5: fdbd0ccb8d0bea52f95cedb51c3de9e9
SHA256: 45659c8b8a21158dbad3a15a174a42f923c6c179d9dcc3168d64f89cd9f1433e
CNH Ransomware Download