WastedLocker

WastedLocker is a Windows ransomware.

Background

WastedLocker is ransomware that has been observed in EvilCorp operations since May 2020. Its name comes from the filenames it generates, which combine an abbreviated form of the victim's name with the string 'wasted'. The malware is wrapped in a custom crypter that Fox-IT InTELL calls CryptOne; analysis showed this crypter to be quite simple and to have been reused by other families including Netwalker, Gozi ISFB v3, ZLoader and Smokeloader. It largely consists of junk code intended to raise the sample's entropy and conceal the real payload.

Source: Malpedia (Fraunhofer FKIE).