Netskope Threat Labs

GarrantDecrypt

ATP Sandbox Adv. HeuristicsAV

GarrantDecrypt is ransomware that encrypts files on infected systems and demands payment for decryption.

First seen
April 2022
Last seen
October 2026
Alert Name
Binary.Ransomware.GarrantDecrypt
ByteCode-MSIL.Ransomware.GarrantDecrypt
DeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
DeepScan:Generic.Ransom.GarrantDecrypt.B.1B223A04
DeepScan:Generic.Ransom.GarrantDecrypt.B.3BEAA77D
DeepScan:Generic.Ransom.GarrantDecrypt.B.478D83FF
DeepScan:Generic.Ransom.GarrantDecrypt.B.9BD587D8
DeepScan:Generic.Ransom.GarrantDecrypt.B.EEE6C85D
DeepScan:Generic.Ransom.GarrantDecrypt.B.FC77FC0F
Dump:Generic.Ransom.GarrantDecrypt.B.0A449CF2