Mole ransomware: analysis and decryptor

This report analyzes the Mole ransomware (a CryptoMix-family variant) that is distributed via malspam linking to fake Word documents which prompt a malicious plugin; it details persistence mechanisms, a UAC bypass trick, shadow copy deletion, obfuscated target extensions, and an RC4-based encryption routine, and includes hashes/patterns and a note that victims sought a decryptor.