TF-MAL-jar.javalocker
📛 Threat Title
Malware family: JavaLocker
Description
ThreatFox malware family `jar.javalocker`. Printable name: JavaLocker. Aliases: JavaEncrypt Ransomware.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
jar.javalocker
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/jar.javalocker
IOC database
- Type
- domain
- Value
jar.javalocker- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-jar.javalocker
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/jar.javalocker
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
Antivirus/Antimalware solutions utilize signatures, heuristics, and behavioral analysis to detect, block, and remediate malicious software, including viruses, trojans, ransomware, and spyware. These solutions continuously monitor endpoints and systems for known malicious patterns and suspicious behaviors that indicate compromise. Antivirus/Antimalware software should be deployed across all ...
-
web:elastio.com
Javalocker Ransomware Javalocker is a malicious ransomware strain that encrypts victim files and demands ransom payment for decryption. First observed in the wild on February 29, 2020, this ransomware has been actively targeting systems worldwide. Security researchers also track this malware under the aliases: JavaEncrypt.
-
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the JavaLocker malware family including references, samples and yara signatures.
-
web:softwaretested.com
The Javalocker is a ransomware strain that primarily infects Windows devices and locks all personal files. After successfully encrypting the files, it will ask for a $300 ransom in the form of bitcoins. Some of the file types that are targeted for encryption by the malware include PDFs, MS Office documents, videos, and databases. What Can the Javalocker Ransomware Do? Once inside your computer ...
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.esd.whs.mil
Ensure configuration, asset, remediation , and mitigation management supports vulnerability management within the DODIN in accordance with DoD Instruction (DoDI) 8510.01. Support all systems, subsystems, and system components owned by or operated on behalf of DoD with efficient vulnerability assessment techniques, procedures, and capabilities.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.pcrisk.com
Discovered by Jirehlov, JavaEncrypt (also known as JavaLocker ) is malicious software classified as ransomware. Systems infected with this malware have their data encrypted and users receive ransom demands for decryption. During the encryption process, all compromised files are appended with the ".javaencrypt " or ". javalocker " extension.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.