New Coronavirus screenlocker malware is extremely annoying

guest · Apr 21, 2020

New Coronavirus screenlocker malware is extremely annoying
April 21, 2020
https://www.bleepingcomputer.com/ne...s-screenlocker-malware-is-extremely-annoying/

A fake WiFi hacking program is being used to distribute a new Coronavirus-themed malware that tries to lock you out of Windows while making some very annoying sounds.

This new screenlocker is called 'CoronaLocker' and was discovered by security researcher Max Kersten last week after a friend became infected by a program named 'wifihacker.exe'.
Once installed, the computer will reboot, and upon restart, users will be shown a lock screen stating "you are infected of corona virus" with a contact email of computertricks2018@gmail.com.

When a user logs into Windows, they will be shown a lock screen with an email address of systemdestroyer0108@gmail.com. The good news is that you can type vb and press the OK button to get past this screen and launch your Windows desktop.
Click to expand...

Unfortunately, the malware creates a variety of Registry settings that prevent the Task Manager and Run commands from working, the Desktop icons are hidden, Start Menu is disabled, and more.
To see what Registry entries have been modified, you can see Kersten's blog post.

For those who want to see this whole annoying mess in action, you can watch the video below.
Click to expand...

Corona Locker

The sample was obtained after a request for help was posted in the Malware Research group on Telegram, after a user was infected with this malware. It seems that my public submission at the 14th of April 2020 lead to the file to be on VirusTotal, where S!Ri found it.

At first, observations regarding the sample on the infected machine will be given. After that, the sample will be analysed in the usual step-by-step manner. Lastly, information on the actor is given.
Click to expand...

Log in or Sign up

New Coronavirus screenlocker malware is extremely annoying

guest Guest

Log in or Sign up

New Coronavirus screenlocker malware is extremely annoying

guest Guest

Useful Searches