MSIL/GandCrab.FOD!tr.ransom

Analysis

MSIL/GandCrab.FOD!tr.ransom is a generic detection for Ransomware GandCrab trojan.

Below is an illustration of the malware's Ransom notes:

Figure 1: Ransom note.

For more details about this malware please refer to W32/GandCrab.FOD!tr.ransom

Recommended Action

• Make sure that your FortiGate/FortiClient system is using the latest AV database.
• Quarantine/delete files that are detected and replace infected files with clean backup copies.