CrazyCrypt v3.19 Ransomware (.id.<Random>.[buykey@decryptionsales.online].crazy) - Videos - CheckMAL

KOR
ENG

Videos

Check out our video library AppCheck defending against newest ransomware, automatic recovery and real-time backup.

CrazyCrypt v3.19 Ransomware (.id.<Random>.[buykey@decryptionsales.online].crazy)

Distribution Method : Unknown

MD5 : 8f5ef61b30555d6273a715a7ad8e3f11

Major Detection Name : Trojan/Win32.Ransomlock.R257624 (AhnLab V3), Ransom.CrazyCrypt (Malwarebytes)

Encrypted File Pattern : .id.<Random>.[buykey@decryptionsales.online].crazy

Major Characteristics :
- Offline Encryption
- Hidden-Tear open source based ransomware
- Stupid Ransomware series
- Disable and Blocks Registry Editor (regedit.exe), Command Prompt (cmd.exe), System Configuration (msconfig.exe) and Task Manager (Taskmgr.exe)
- Turns off User Access Control (UAC)
- Disable Windows Defender