- Distribution Method : Unknown
- MD5 : 6e7332f56cc478f128332036fbdf480e
- Major Detection Name : Gen:Heur.Ransom.HiddenTears.1 (BitDefender), Ransom_HiddenTearCYBER.A (Trend Micro)
- Encrypted File Pattern : .locked
- Malicious File Creation Location :
- C:\%UserName%
- C:\%UserName%\Rand123
- C:\%UserName%\Rand123\local.exe
- Payment Instruction File : READ_IT.txt
- Major Characteristics :
- Offline Encryption
- AnonCrack / Balbaz / Brazilian / CryBrazil / Cryp70n1c Army / Curumim / EyLamo / Jhash / Magic / Skull HT / Technicy Ransomware series
- Hidden-Tear open source based ransomware
- Changes desktop background (C:\%UserName%\test.jpg)
List