Dissecting a Ransomware Attack

  • Tuesday, 18 Sep 2018 1:00PM EDT (18 Sep 2018 17:00 UTC)
  • Speakers: Jacob Williams, Rohan Viegas

A growing business model for threat actors is now Ransomware-as-a-Service (RaaS). RaaS focuses on selling ransomware wholesale as an easy-to-use service, opening up a broader market of non-technical attackers. Many ransomware developers now focus on developing and maintaining a service which allows their affiliates (customers) to start attacks with just a few clicks. One of the most popular RaaS families in 2018 is Gandcrab.

In this SANS Webcast VMRay Product Manager, Rohan Viegas will show you how Gandcrab ransomware evades detection and analysis and infects victims. By watching this webcast you will learn Gandcrab's: distribution methods, packer techniques, payload history, control flow and more.