GrandSoft Exploit Kit delivers GandCrab 3.0.0 Ransomware

VTI SCORE: 100/100

Target:

win7_64_sp1 | ie

Classification:

Downloader, Ransomware

http://financialbroker.gq

URL

Created at 2018-04-24 10:30:00

Notifications (2/3)

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

Code overwrite was observed during this analysis. Note that the analysis results may be affected by this modification by the sample.

The operating system was rebooted during the analysis.

YARA Information

Applied On	Sample Files, Created Files, Modified Files, PCAP File, Process Dumps
Number of YARA matches	0

There are no YARA matches for this sample

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Notifications (2/3)

YARA Information

There are no YARA matches for this sample

Before

After