- Distribution Method : Unknown
- MD5 : c942a03394d157c90da46af7dd14071b
- Major Detection Name : Generic.Ransom.CloudSword.08A722F0 (BitDefender), Ransom.CrazyCrypt (Malwarebytes)
- Encrypted File Pattern : .id.<Random>.[buykey@decryptionsales.online].crazy
- Major Characteristics :
- Offline Encryption
- Hidden-Tear open source based ransomware
- Stupid Ransomware series
- Disable and Blocks Registry Editor (regedit.exe), Command Prompt (cmd.exe), System Configuration (msconfig.exe) and Task Manager (Taskmgr.exe)
- Turns off User Access Control (UAC)
- Disable Windows Defender
List