- Distribution Method : Unknown
- MD5 : 5691844cacd14051ddd92ae5e50b13cf
- Major Detection Name : Ransom.HiddenTear (Norton), Ransom_LOCKON.A (Trend Micro)
- Encrypted File Pattern : <Random Filename>.lockon
- Malicious File Creation Location : C:\Users\%UserName%\AppData\Local\Temp\windowsdefender.bin
- Major Characteristics :
- Offline Encryption
- Hidden-Tear Open Source based Ransomware
- The French users targeted
- Changes desktop background (Background.jpg)
List