MindSystem is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on August 1, 2017, this ransomware has been actively targeting systems worldwide. Security researchers also track this malware under the aliases: MindSystem 2017, MindSystemNotRansomWare Eduware.
Quick Facts
Ransomware Family
MindSystem
First Seen
August 1, 2017
Known Aliases
MindSystem 2017MindSystemNotRansomWare Eduware
How MindSystem Ransomware Works
Targeted Files
Encrypts filenames -> TcXD^&A5e6HY1.mind
File Encryption Patterns
MindSystem modifies encrypted files using specific patterns to mark them as encrypted:
File extensions added after encryption:
..mind
Ransom Note and Payment Demands
After encrypting files, MindSystem displays ransom notes demanding payment for file recovery:
message
Ransom message:
notes/note.txt
Note locations:
OnceOnCompletion
screenshot
Ransom message:
notes/image-note.png
Note locations:
Desktop
Technical Indicators
Associated Executable Files
The following executable files are associated with MindSystem ransomware:
MindSystemNotRansomWare.exe
ConsoleApp1.exe
Elastio Can Help You
Don't let MindSystem ransomware take over your data
Elastio provides advanced ransomware protection and recovery solutions to keep your organization safe.
This MindSystem ransomware analysis is part of Elastio's comprehensive ransomware detection database. Elastio provides advanced ransomware protection and recovery solutions, helping organizations defend against and recover from ransomware attacks like MindSystem.