ランサムウェアNailaoLockerの調査
ID: a852e80a-3c18-560d-8973-2a14ad860cc7
STIX ID: report--a852e80a-3c18-560d-8973-2a14ad860cc7
Feed Name: IIJ Security Diary
Threat Score
This technical analysis of NailaoLocker details sample hashes and a static decryption script, the ransomware’s hybrid RSA+AES-256-CBC encryption flow (encrypting the first 0x10000 bytes and appending an encrypted footer), exclusions, logging behavior, presence of a decrypt mode, API-hooking anti-detection, and differences between v3 (CNG) and v7 (statically linked OpenSSL); appendices include the encoded data structure and a YARA rule.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.