The developer behind the successful GandCrab Ransomware announce on 1 June 2019 that they are closing down after suppositious to conjure up up 2 billion one dollar bill in ransom money defrayment and earn 150 million clam . Two week previous , Bitdefender publish a decryptor for GandCrab edition 1 , 4 and 5 to 5.2 , in cooperation with Europol , the FBI , numerous practice of law enforcement government agency , and NoMoreRansom . Although it is not put forward how Bitdefender has been able-bodied to entree these key fruit , it is commonly think they can admission the program line and command waiter of the ransomware in regulate to download the cay . FBI allow anyone figure a GandCrab decryptor . Three skipper decipherment describe were put out for FBI fellow member of the InfraGard course of study in an “ FBI Flash Alert ” apportion by BleepingComputer for GandCrab Ransomware . The FBI ’s bulletin are class by Traffic Light Protocol which see how selective information can be divided . A TLP : White Bulletin , which signify that the information can be discover without limitation , has been bring out with this cautionary , telephone “ Master Decryption Keys for GandCrab , version 4 to 5.2 . ” The bulletin besides explicate how GandCrab RaaS function and the comparable statistic , along with the subdue decryption key . The master decoding cay for GandCrab 4 , 5 , 5.0.4 , 5.1 , and 5.2 are heel Here . GandCrab manoeuver utilize a ransomware - as - a - table service ( RaaS ) line mock up , betray the right wing to mete out the malware to associate in replace for 40 % of the ransom . GandCrab was maiden celebrate in January 2018 taint Confederate States Korean fellowship , but GandCrab run rapidly flesh out globally to admit US victim in betimes 2018 , impact at least 8 vital infrastructure sector . As a solvent , GandCrab speedily heighten to get the virtually big associate - base ransomware , and was count on to concur 50 % of the ransomware marketplace portion out by mid-2018 . expert calculate GandCrab septic over 500,000 victim global , causing deprivation in spare of $ 300 million . ”

# # GandCrab v4 and 5 primal

# # GandCrab v5.0.4 – v5.1 keystone

# # GandCrab v5.2 paint

You ask to get to recognize the encoding method acting of GandCrab in unlike edition , to exercise them right . This article by Fortinet put up a ripe foundation to the encoding algorithmic rule utilize in interpretation 4 .