- Distribution Method : Unknown
 
 - MD5 : 8f5ef61b30555d6273a715a7ad8e3f11
 
 - Major Detection Name : Trojan/Win32.Ransomlock.R257624 (AhnLab V3), Ransom.CrazyCrypt (Malwarebytes)
 
 - Encrypted File Pattern : .id.<Random>.[buykey@decryptionsales.online].crazy
 
 - Major Characteristics :
 - Offline Encryption
 - Hidden-Tear open source based ransomware
 - Stupid Ransomware series
 - Disable and Blocks Registry Editor (regedit.exe), Command Prompt (cmd.exe), System Configuration (msconfig.exe) and Task Manager (Taskmgr.exe)
 - Turns off User Access Control (UAC)
 - Disable Windows Defender 
 
					List