DOWNLOAD DATASHEETTrustlook has studied thousands of real-world ransomware variants, from hundreds of different ransomware families, to define and develop a dedicated solution that tackles ransomware head-on.
s.a.f.e. ransomware detection
SMART
Proprietary classifier identifies and blocks ransomware files with specific malware characteristics. The system is constantly improving and will continue to stop known and unknown threats.
ACCURATE
Industry leading detection rate of 99.2%, with less than 1% false positives. Contains deep reference set of thousands of malicious and benign samples, with new samples collected every day.
FAST
Looks only at the header information to dramatically speed up performance. It can process dozens of files per second, and will not weigh down the network.
EFFECTIVE
The system learns and adapts to block new threats before files and data are encrypted. It stops executables from launching if the static analysis finds any malicious code.
What is Ransomware?
Ransomware is a class of malware that locks, encrypts, or otherwise prevents data and systems from being accessed by their owners, and requires victims to pay a ransom to the criminal responsible for the attack in order to regain access.
The Number of Ransomware Attacks are Projected to Double in 2017
INTEGRATION AND HOW IT WORKS
1 SECUREai Core Ransomware’s lightweight SDK is installed into the network appliance or endpoint as part of other static and behavioral security measures.
2 As files come in, their characteristics are extracted and analyzed before the files run on the endpoint or device
3 A ransomware probability score is created based on this analysis.
4 Malicious files are blocked before they can execute (see example).
5 Clean files are sent to the user.
FILE EXAMPLE
Scanned File Sample
The file below has a 99.99% chance of being part of the Haperlock ransomware family. The file was processed in .004 seconds.
Analyzing file: /home/nfs/data/PE_VT_Ran-
som_10k/168dcfbfd1331c66c782947af019-
bec241b56fa68d127836be5566b534fe8700
Ransomware score : 0.999956
Result : Ransomware.haperlock
Summary
Total Execution time: 0.004020 seconds
Average scan time per file: 0.004020 seconds
Total number of files: 1
Number of successful scan: 1
Number of failed files: 0
Number of ransomware: 1
Number of benign: 0
Percentage of ransomware: 100.000000%
Technical Specifications
Size: 4MB
Implementation: C-Library as software SDK ELF executable binary
Platform requirements: CPU Intel1GHz or faster 32-bit (x86) or 64-bit (x64), RAM 512M
Supported OS: Linux
Performance: 99.2% detection rate 250 files per second
Functionality: 28,000 features analyzed Static analysis Machine learning
download
contact UsSEE SECUREai IN ACTION
Contact us to see how Trustlook SECUREai
can take your security to the next level.
Contact Us