This is a new type of ransomware. Ragnar Locker ransomware was deployed inside an Oracle VirtualBox Windows XP virtual machine. The attack payload was a 122 MB installer with a 282 MB virtual image inside, all to conceal a 49 kB ransomware executable.
Note: Wow, this is so cool. We are adding this ransomware to RCCE®. Hacking Reinvented. Like. No. Other.