AXLocker ransomware doesn't change files' extensions

AXLocker is a ransomware that was found by malware researcher ‘S!ri,’ who posted it on Twitter. Later, it was discovered that AXLocker does not only encrypt files but also steals victims’ Discord credentials and uploads them to its own Discord server. Specifically, the AXLocker ransomware steals tokens stored on a local computer when the user logs in to Discord. It’s not packed or obfuscated.

AXLocker ransomware doesn't change files' extensions

AxLocker: A new wave of ransomware attacks targeting Discord Servers

AXLocker Ransomware - Decryption, removal, and lost files recovery (updated)

AvosLocker Ransomware Report - CYFIRMA

AXLocker ransomware doesn't change files' extensions

XLocker Ransomware - Decryption, removal, and lost files recovery (updated)

AXLocker ransomware doesn't change files' extensions

Cybercriminals Focusing on Microsoft SQL Servers for FreeWorld Ransomware Deployment

Threat Actors Using Malicious Microsoft OneNote Attachments to Infect Windows Systems

Nitrogen Malware Exploits Google Ads to Deliver Ransomware Attacks

All About Qlocker Ransomware - Securin

AxLocker Ransomware Adds a Twist: Stealing Discord Tokens

Recently, my PC got infected with a ransomware virus, which has changed all files to extension .derp. Now, how do I change all the file extensions to their previous versions? - Quora