Views:

Available Solution

VSAPI and TrendX

VSAPI/SMARTPatternDetection/Policy/RulesPattern branch/versionReleased date/time
TrendXTroj.Win32.TRX.XXPE50F13007
TROJ.Win32.TRX.XXPE50FLM005
N/AApril 16, 2019
VSAPIRansom.Win32.CORTEX.SM
Ransom.Win32.CORTEX.A
Ransom.Win32.CORTEX.B
Ransom.BAT.CORTEX.D
Worm.BAT.CORTEX.A
Trojan.BAT.CORTEX.A
Ransom.BAT.CORTEX.B
Ransom.BAT.CORTEX.A
Ransom.Win32.CORTEX.A.note
ENT OPR 14.989.03May 9, 2019

Behavior Monitoring

Behavioral MonitoringPatternDetection/Policy/RulesPattern branch/versionReleased date
AEGISPA5965S - checks for the dropped ransom note and .tsv file in rootdirTMTD OPR 1899May 10, 2019
AEGISRAN2922S - Multiple Forced Taskkill CommandsTMTD OPR 1899May 10, 2019

Anti-Spam and Web Protection

Email ProtectionSubjectMD5Pattern branch/versionReleased date
N/AN/AN/AN/A
URL ProtectionURLCategoryBlocking Date
N/AN/AN/A

Solution Map

ProductVersionVirus PatternBehavior MonitoringTrendX
Apex One and Apex CentralSaaS and On PremiseTurn On Real Time Scan via Apex CentralTurn On Ransomware Protection Features via Apex CentralTurn On Predictive Machine Learning via Apex Central
OfficeScanXG and aboveTurn On Real Time Scan/ Update Patterns via Web ConsoleTurn On Ransomware Protection Features /Update Pattern via Web consoleTurn On Predictive Machine Learning via Web Console
11 SP1Turn On Real Time Scan/ Update Patterns via Web ConsoleTurn On Ransomware Protection Feature/Update Pattern via Web console 
Deep Security11Enable Anti-Malware Policies and Turn on Real Time Scan in Deep Security ManagerConfigure Anti Malware Policies and Enable Ransomware Protection Modules in Deep Security ManagerEnable Predictive Machine Learning in Deep Security Manager
10Enable Anti-Malware Policies and Turn on Real Time Scan in Deep Security ManagerConfigure Anti Malware Policies and Enable Ransomware Protection Modules in Deep Security Manager 
Worry-Free Business SecurityServices (SaaS)Turn On Real Time Scan via Web ConsoleTurn On Ransomware Protection Features via Web consoleTurn On Predictive Machine Learning via Web Console
10 and AboveTurn On Real Time Scan/ Update Patterns via Web ConsoleTurn On Ransomware Protection Features /Update Pattern via Web consoleTurn On Predictive Machine Learning via Web Console

Recommendations

Threat Report

Threat Report: Ransom.Win32.CORTEX.A

Blog

MegaCortex Ransomware Spotted Attacking Enterprise Networks