Originally a disk wiper, it now functions as ransomware that encrypts files with a .lock extension and deletes the originals. Indicators of Infection: Creation of scheduled tasks like MicrosoftCrashHandlerUAC .
If "Apostle.rar" was received via an unsolicited email or download, it may be a delivery vehicle for , a tool used by the threat actor Agrius . Apostle.rar
Dropping batch scripts (e.g., system.bat , remover.bat ) for anti-forensic tasks. Originally a disk wiper, it now functions as
Attempted deletion of Windows Event Logs to hide its activity. Originally a disk wiper
The game follows Rei, a student who becomes an "Apostle" to fight demonic threats.