GandCrab v4.1 in the wild — first Windows XP and Server 2003 impacting ransomware SMB worm
Common Information
Type Value
UUID b17024d8-bee4-4b28-8f3f-15525e41707a
Fingerprint 163eba73ebb631d6
Analysis status DONE
Considered CTI value 0
Text language
Published July 6, 2018, 11:51 a.m.
Added to db Feb. 17, 2023, 9:49 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline GandCrab v4.1 in the wild — first Windows XP and Server 2003 impacting ransomware SMB worm
Title GandCrab v4.1 in the wild — first Windows XP and Server 2003 impacting ransomware SMB worm
Detected Hints/Tags/Attributes 20/1/4
Attributes
Details Type #Events CTI Value
Details File 1
eternalblue.exe
Details File 478
lsass.exe
Details sha256 3
8ecbfe6f52ae98b5c9e406459804c4ba7f110e71716ebf05015a3a99c995baa1
Details Windows Registry Key 1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\SMBv1