https://isc.sans.edu/diary/Another%20Script-Based%20Ransomware/29234