FunkLocker Ransomware File Creation

Last updated on:

In this page

About the rule

Rule Type

Standard

Rule Description

Detects the creation of files with the ".funksec" extension, which is appended to encrypted files by the FunkLocker ransomware.

Severity

Trouble

Detection

Execution Mode

realtime

Log Sources

Windows

Author

@Saiprashanth Pulisetti ( @Prashanthblogs)