The Mallox ransomware has been notable for its speed in encrypting files, the group mainly uses spam email campaigns and trojans to break into victims’ systems. Like some groups, Mallox avoids attacking users in specific countries such as Russia, Kazakhstan, Ukraine, and Qatar. Once the ransomware invades the system it analyzes the language used by the operating system, if it