$uckyLocker.exe

Classification: Malicious

$uckyLocker.exe is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-05. Detected by 97 antivirus engines.

Detection summary

  • 97 antivirus detections (90% detection ratio)
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hiddentear Triage 2026-08-14 00:05:08 2026-09-05 05:07:29 malicious-activity
Generic Malware Triage 2026-02-01 13:22:42 2026-04-07 05:18:45 malicious-activity
Generic Malware Hybrid-Analysis 2023-05-04 19:15:05 2023-05-04 19:15:05
Ransom.HiddenTear Hybrid-Analysis 2018-07-21 20:17:09 2018-07-21 20:17:09

Tags

windows-server-utility adware autorun backdoor crypt downloader exploit hiddentear injector keylogger ransomware riskware toolbar worm defense_evasion discovery

Sample information

Filenames
$uckyLocker.exe, 86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f.bin, sucylocker.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
424448 bytes
MD5
c850f942ccf6e45230169cc4bd9eb5c8
SHA-1
51c647e2b150e781bd1910cac4061a2cee1daf89
SHA-256
86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f
SHA-512
2b3890241b8c8690aab0aed347daa778aba20f29f76e8b79b02953b6252324317520b91ea60d3ef73e42ad403f7a6e0e3f2a057799f21ed447dae7096b2f47d9
First indexed
2018-07-21 20:17:09
Last updated
2026-09-05 05:56:57

Antivirus detections

EngineDetection
MicroWorld-eScanGen:Heur.MSIL.Krypt.4
CAT-QuickHealRansom.Ryzerlo
McAfeeRansomware-FTD!C850F942CCF6
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7GWTrojan ( 004cd5d01 )
K7AntiVirusTrojan ( 004cd5d01 )
TrendMicroRansom_HiddenTearSUSY.A
F-ProtW32/Ransom.IQ.gen!Eldorado
SymantecRansom.HiddenTear!g1
ESET-NOD32a variant of MSIL/Filecoder.Y
TrendMicro-HouseCallRansom_HiddenTearSUSY.A
Paloaltogeneric.ml
GDataMSIL.Trojan-Ransom.Cryptear.R
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.MSIL.Krypt.4
NANO-AntivirusTrojan.Win32.Encoder.eppjto
AvastWin32:Malware-gen
TencentWin32.Trojan.Generic.Syhk
Ad-AwareGen:Heur.MSIL.Krypt.4
SophosTroj/Cryptear-A
ComodoTrojWare.Win32.Ransom.Crypt.~
F-SecureGen:Heur.MSIL.Krypt.4
DrWebTrojan.Encoder.10598
ZillyaTrojan.Filecoder.Win32.5323
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
EmsisoftGen:Heur.MSIL.Krypt.4 (B)
SentinelOnestatic engine - malicious
CyrenW32/Trojan.MVMF-7689
JiangminTrojan.Generic.bnniw
WebrootW32.Malware.Gen
AviraHEUR/AGEN.1016243
Antiy-AVLTrojan/Win32.AGeneric
Endgamemalicious (moderate confidence)
ArcabitTrojan.MSIL.Krypt.4
AegisLabTroj.W32.Generic!c
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftRansom:MSIL/Ryzerlo.A
AhnLab-V3Trojan/Win32.Ransom.C1992674
ALYacTrojan.Ransom.FileCryptor
AVwareTrojan.Win32.Generic!BT
MAXmalware (ai score=99)
VBA32TScope.Trojan.MSIL
MalwarebytesRansom.HiddenTear
RisingRansom.FileCryptor!8.1A7 (CLOUD)
YandexTrojan.Agent!1TtM7CnAHro
IkarusTrojan-Ransom.HiddenTear
FortinetMSIL/Filecoder.Y!tr
AVGWin32:Malware-gen
Cybereasonmalicious.2ccf6e
PandaTrj/GdSda.A
CrowdStrikemalicious_confidence_100% (W)
Qihoo-360Win32/Trojan.385
AVGWin32:MalwareX-gen [Misc]
AhnLab-V3Trojan/Win.Black.R476000
AlibabaRansom:MSIL/Filecoder.f56f9cfb
Antiy-AVLTrojan[Ransom]/Win32.Dcrypt.a
ArcabitTrojan.Ransom.Ryzerlo.B
AvastWin32:MalwareX-gen [Misc]
AviraHEUR/AGEN.1309275
BitDefenderTrojan.Ransom.Ryzerlo.B
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
CTXexe.trojan.msil
ClamAVWin.Ransomware.Hiddentear-9752356-0
CrowdStrikewin/malicious_confidence_100% (W)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
EmsisoftTrojan.FileCoder (A)
F-SecureHeuristic.HEUR/AGEN.1309275
FortinetMSIL/Filecoder.Y!tr.ransom
GoogleDetected
GridinsoftMalware.Win32.GenericMC.cc
JiangminTrojan.Generic.bahoq
KasperskyHEUR:Trojan-Ransom.MSIL.Agent.gen
KingsoftMSIL.Trojan-Ransom.Agent.gen
LionicTrojan.Win32.HiddenTear.j!c
MalwarebytesGeneric.Ransom.FileCryptor.DDS
MaxSecureTrojan.Malware.300983.susgen
McAfeeDti!86E0EAC8C5CE
MicroWorld-eScanTrojan.Ransom.Ryzerlo.B
MicrosoftTrojan:MSIL/Cryptor
PandaTrj/CI.A
RisingRansom.HiddenTear!1.E817 (CLASSIC)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighRansomware-FTD!C850F942CCF6
TencentMalware.Win32.Gencirc.10bf3b21
Trapminemalicious.high.ml.score
TrellixENSRansomware-FTD!C850F942CCF6
VIPRETrojan.Ransom.Ryzerlo.B
VaristW32/Filecoder.PWOQ-0604
ViRobotTrojan.Win32.Z.Filecoder.424448
VirITTrojan.Win32.Encoder.PRQ
XcitiumMalware@#24ndyhkaq6f9e
ZoneAlarmTroj/Cryptear-A
alibabacloudRansomware:Win/HiddenTear.CZ
huorongRansom/MSIL.LockFile.c

Process list

NameCommand line
sucylocker.exe
_uckyLocker.exe
WerFault.exe-u -p 5080 -s 1128
WerFault.exe-u -p 5080 -s 1128
WerFault.exe-u -p 5080 -s 1128