An anonymous user uploaded a copy of the DeriaLock binary to VirusTotal. The ransom note asks users to pay $30 for their computer to get their data back. There’s no information on how the ransomware currently spreads, but the ransom note is full of spelling errors. Ransomware families generally fall in one of two categories: screen lockers and crypto lockers. Deria lockers prevent users from accessing their computer but leave their files alone. The malware’s source code includes a hard-coded MD5 hash, for which the screen locker won’t start.
Source: https://www.bleepingcomputer.com/news/security/new-derialock-ransomware-active-on-christmas-includes-an-unlock-all-command/

