- Distribution Method : Unknown
- MD5 : 6b86f3fb1a18d865a181ae916e298ff5
- Major Detection Name : Gen:Heur.Ransom.HiddenTears.1 (BitDefender), Ransom_HiddenTearAnonCrack.A (Trend Micro)
- Encrypted File Pattern : .crack
- Malicious File Creation Location :
- C:\%UserName%
- C:\%UserName%\Rand123
- C:\%UserName%\Rand123\local.exe
- Payment Instruction File : PAGO.txt
- Major Characteristics :
- Offline Encryption
- Balbaz / Brazilian / CryBrazil / Cryp70n1c Army / EyLamo / Jhash / Magic / Skull HT / Technicy Ransomware series
- Hidden-Tear Open Source based Ransomware
- The Spanish users targeted
- Changes desktop background (C:\%UserName%\ransom.jpg)
List