Trend Micro, a company specializing in antivirus products, conducted an investigation related to the "smart"
The virus is able to adapt to any victim by creating an autorun copy of itself. Agenda is designed to work in a Windows environment.
The virus supports several command line parametersline, can remove shadow copies, terminate processes, and stop antivirus services. The program is written in the special language Go, or Golang. This makes the ransomware very flexible and easily customizable for any target device.
The virus attacks mainly organizations in the field of education and healthcare. The amount of the required ransom is, as a rule, from $50,000 to $800,000.
“Each malware sample was customized tospecific victim. Our investigation revealed that the samples leaked accounts, customer passwords, and used each company's unique identifiers as an extension for encrypted files.