Signature Detail

Short Name	TROJAN:CRYPTOWALL
Severity	Critical
Recommended	Yes
Category	TROJAN
Keywords	quality:medium
Release Date	2014/06/23
Update Number	2392
Supported Platforms	idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

CRYPTOWALL

This signature detects phone-home packets from CryptoWall. CryptoWall is a BitLocker variant that encrypts user files after infection. This signature indicates an infected source.

References

URL: http://www.cyberoam.com/blog/cryptowall-the-extended-version-of-cryptolocker/
URL: http://en.wikipedia.org/wiki/CryptoLocker
URL: http://nakedsecurity.sophos.com/2014/06/18/whats-next-for-ransomware-cryptowall-picks-up-where-cryptolocker-left-off/

Signature Detail

Short Name

Severity

Recommended

Category

Keywords

Release Date

Update Number

Supported Platforms

CRYPTOWALL

References