X-mas.rar - Merry

.MERRY , .RARE1 , .PEGS1 , .MRCR1 , and .RMCM1 . 1. Attack Vector & Distribution

Some variants drop the DiamondFox malware, an infostealer capable of harvesting passwords, credit card data, and turning the PC into a DDoS bot. 3. Symptoms of Infection Merry X-Mas Ransomware Decryption Tool - Check Point Blog

It remains idle for a short period before connecting to a Command & Control (C2) server (historically https://onion1.host/cd/copy/gate.php ) to upload the victim's computer name, username, running processes, and hardware info.