Rule Document 1:66995

Rule Category

MALWARE-OTHER --

Alert Message

MALWARE-OTHER Win.Ransomware.Anubis download attempt

Rule Explanation

This rule triggers on the Anubis Ransomware binary. Specifically, it triggers on known configuration blocks inside the ransomware itself.

What To Look For

This rule triggers on the Anubis Ransomware binary

Known Usage

Attacks/Scans seen in the wild

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group