Memento ransomware attacks lock files in password protected archive and demand $1M in bitcoin, Sophos security researchers find.