CryptoLocker v1

Description

One of our administrator has been called after a CryptoLocker has been executed on a highly sensible serveur, right after applying an update provided by a third-party service provider. This malware specifically targets a file that could ruin the company: it is very important to recover it. The administrator tells us that to prevent the malware from spreading, she paused the virtual machine and dumped its memory as soon as she detected the attack. You are our only hope.