Threat Landscape Dashboard

Assessing today's threats and the relationships between them

GandCrab 4 - Ransomware

The ransomware demands $1,200.00 in DASH or Bitcoin for the decryption key and appends ".KRAB" to infected files. The malicious software is capable of sending the IP address, computer name, network name, and username from the compromised host to hard-coded URLs. The ransomware is also programmed to kill a range of processes including msftesql.exe, sqlagent.exe, sqlbrowser.exe, sqlwriter.exe, and oracle.exe.
Name Modified Date Sources
GandCrab 4 - Ransomware 2018-07-19