Netskope Threat Labs

CryptoWall

ATP Sandbox Adv. HeuristicsAV

CryptoWall is a ransomware family that spreads through spam and phishing emails, malicious advertisements, hacked websites, and other malware, with a Trojan horse delivering its payload to infected systems. Users who encounter its ransom demand face the loss of access to their encrypted files, so detections warrant quick isolation of the affected machine before the encryption finishes.

First seen
April 2022
Last seen
October 2026
Alert Name
ByteCode-MSIL.Ransomware.CryptoWall
Gen:Heur.CryptoWall.3
Gen:Variant.Ransom.CryptoWall.30
Gen:Variant.Ransom.CryptoWall.55
Gen:Variant.Ransom.CryptoWall.77
Gen:Variant.Ransom.CryptoWall.85
Trojan.Ransom.CryptoWall.A
Trojan.Ransom.CryptoWall.B
Win32.Ransomware.CryptoWall