Happy Ransomware encrypts user data using AES, and ask ransom to recover files. Original file name is T1, but it is not indicated in the lock-note. The file says: T1.exe. Encrypted files have .happy extension.

XCry Ransomware encrypts all files on victim's machine with AES and ask ransom in BTC. Encrypted file names are appended with .xcry7684 extension.

Cossy or Grafimatriux Ransomware is a Russian ransomware that encrypts user files with RSA-2048 and demands a ransom in BTC worth 50 rubles.

Black Worm Ransomware encrypt user data with BTC and demand ranwom in BTC. Encrypted files have .bworm extension appended to them.

FORMA Ransomware is a HiddenTear derivative apparently target toward Polish population. It encrypts files using AES and demands ransom in BTC.