Gasket

First seen
2020-02-15 00:00:00
Malware type
backdoor, ransomware
Profile updated
2026-07-07 13:46:21

Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector

Context

A backdoor used by Mespinoza ransomware gang to maintain access to a compromised network.

Detection coverage

  • 1 YARA rules

Detection rules

  • DITEKSHEN_MALWARE_Win_Gasket (yara-rule)

Reports & references

  • Palo Alto Unit 42 — Gasket And Magicsocks Tools Install Mespinoza Ransomware (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Gasket (report)

External references