Interlock Ransomware Self-Deletion

Elgonad .@elgonad

•updated Mar 16, 2026•2•0•48

Detects the self-deletion mechanism of the Interlock ransomware. The malware executes `rundll32.exe` to call a function within a randomly named DLL file with a `.wasd` extension, passing its own file path as an argument to be deleted.