From gbhackers.com
Shade ransomware first spotted in late 2014, also known as Troldesh or Encoder.858. The ransomware distributed specifically through malicious email attachments.
The origin of the ransomware believed to be from Russia, the ransom notes found to be written in both Russian and English.