Funklocker Multiple Process And Service Termination

Tim Peck@timpeck

•updated Oct 1, 2025•1•104

Detects a high volume of process and service terminations using 'taskkill.exe' and 'sc.exe' within a short time frame. This behavior is characteristic of ransomware like FunkLocker, which aggressively disables applications and services to prepare for encryption.