Actually I am implying it is possible for some types of ransomware. Here's an example.

https://github.com/leo-stone/hack-petya

(the hn thread https://news.ycombinator.com/item?id=11474613 )