A newly surfaced ransomware brand is drawing attention not because it rewrote encryption, but because it appears to be hiding better than older playbooks expected.