A new variant of the CryptXXX ransomware has been released that is not only modifying the extension of encrypted files, but is now renaming the entire file. This practice of completely renaming an encrypted file is not new as we have seen it in CryptoWall and Locky. As CryptXXX is constantly modifying their encrypted file names, I would not be surprised if it changes to something else in the near future. This method, though, does make life more difficult for system administrators to manage system infected by this ransomware.
Source: https://www.bleepingcomputer.com/news/security/cryptxxx-ransomware-is-now-scrambling-the-filenames-of-encrypted-files/