Learn How to Thwart Cyber Attackers with Training in New Orleans. Save $350 thru 3/27.


To attend this webcast, login to your SANS Account or create your Account.

Dissecting a Ransomware Attack

  • Tuesday, September 18th, 2018 at 1:00 PM EDT (17:00:00 UTC)
  • Rohan Viegas and Jake Williams
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.


  • VMRay

You can now attend the webcast using your mobile device!


A growing business model for threat actors is now Ransomware-as-a-Service (RaaS). RaaS focuses on selling ransomware wholesale as an easy-to-use service, opening up a broader market of non-technical attackers. Many ransomware developers now focus on developing and maintaining a service which allows their affiliates (customers) to start attacks with just a few clicks. One of the most popular RaaS families in 2018 is Gandcrab.

In this SANS Webcast VMRay Product Manager, Rohan Viegas will show you how Gandcrab ransomware evades detection and analysis and infects victims. By watching this webcast you will learn Gandcrabs: distribution methods, packer techniques, payload history, control flow and more.

Speaker Bios

Jacob Williams

Jacob Williams is a SANS Analyst, certified SANS instructor, course author and designer of several NetWars challenges for use in SANS' popular, "gamified" information security training suite. Jake spent more than a decade in information security roles at several government agencies, developing specialties in offensive forensics, malware development, and digital counter-espionage. Jake is the founder of Rendition InfoSec, which provides penetration testing, digital forensics and incident response, expertise in cloud-data exfiltration and the tools and guidance to secure client data against sophisticated, persistent attack on-premises and in the cloud.

Rohan Viegas

Rohan brings over 12 years of experience in product development and management roles to VMRay. In his role as Product Manager for Hewlett-Packard Enterprise, prior to VMRay, Rohan managed a portfolio of products including network management and security software.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.