The Hermes Ransomware encrypts the files on a computer. It does not change the name of the files. This ransomware is distributes using
AZORult Stealer malware. When the Hermes ransomware encrypts files on your computes it displays following screen.
Hermes Ransomware Signatures
MD5: ecbfd94e5a0f44df9197cd6810559084
SHA1: 9db4eac9cbf17acc0233f4d5808db8f45eaf7b30
SHA256: 416235b085b6b86640cac3a78f0bd52583eed7154fc3666f5338bde96db10fab
SSDEEP: 6144:77USJR8BPmQxXR+w1rpMuyrQcvFbzA0kMh:U4RSOQiw2rVHXki
Hermes Ransomware Sample Download
Password of the archive is
infected.