FORMA Ransomware is a HiddenTear derivative apparently target toward Polish population. It encrypts files using AES and demands ransom in BTC. Encrypted files are appended with .locked extension.
FORMA Ransomware Signatures
Family: Ransom:Win32/HiddenTear
MD5: 4a3593bef0f80767ab05720c869d91e7
SHA256: 8d2b2a942c9e646a5f388837137a650716e11d95730db7dfeae26ab46778ba99
FORMA Ransomware Download