- Distribution Method : Unknown
- MD5 : 8f5ef61b30555d6273a715a7ad8e3f11
- Major Detection Name : Trojan/Win32.Ransomlock.R257624 (AhnLab V3), Ransom.CrazyCrypt (Malwarebytes)
- Encrypted File Pattern : .id.<Random>.[buykey@decryptionsales.online].crazy
- Major Characteristics :
- Offline Encryption
- Hidden-Tear open source based ransomware
- Stupid Ransomware series
- Disable and Blocks Registry Editor (regedit.exe), Command Prompt (cmd.exe), System Configuration (msconfig.exe) and Task Manager (Taskmgr.exe)
- Turns off User Access Control (UAC)
- Disable Windows Defender
List