This post is by a banned member (Redm00n) - Unhide
OP 05 June, 2021 - 10:37 AM
Reply
This is a proof of concept of how a ransomware works, and some techniques that we usually use to hijack our files. This project is written in C# using the net-core application framework 3.1.The main idea of the code is to make it as readable as possible so that people have an idea of how this type of malware acts and works.
Baphomet features
AES algorithm for file encryption.
RSA encryption to encrypt key.
Automatic propagation via USB.
Hybrid encryption technique.
Enumeration of processes to kill those selected.
Internet connection test.
victim information submissions (Public IP, Domainname, Country, OS.version, City, Machine name, etc).
Program to decrypt the encryption key.
Program to decrypt encrypted data.
Hostname list to send the victim's data (redundancy).
Doesn't detected to antivirus programs (Date: 11/30/2020 12:25pm).
Hardcode image in base64 to change wallpaper (Baphomet image).
GIVE LIKES DON'T LEECH
Hidden Content
You must register or login to view this content.
This post is by a banned member (Miuim) - Unhide
05 June, 2021 - 11:12 AM
Reply
This post is by a banned member (Bradder) - Unhide
05 June, 2021 - 04:17 PM
Reply
This post is by a banned member (Krieger11) - Unhide
05 June, 2021 - 11:19 PM
Reply
This post is by a banned member (externalityez) - Unhide
06 June, 2021 - 03:57 AM
Reply
[font]Really interested in this thank you for sharing m8[/font]
This post is by a banned member (Grim_xploit) - Unhide
07 June, 2021 - 07:51 AM
Reply
(05 June, 2021 - 10:37 AM)Redm00n Wrote: Show MoreThis is a proof of concept of how a ransomware works, and some techniques that we usually use to hijack our files. This project is written in C# using the net-core application framework 3.1.The main idea of the code is to make it as readable as possible so that people have an idea of how this type of malware acts and works.
Baphomet features
AES algorithm for file encryption.
RSA encryption to encrypt key.
Automatic propagation via USB.
Hybrid encryption technique.
Enumeration of processes to kill those selected.
Internet connection test.
victim information submissions (Public IP, Domainname, Country, OS.version, City, Machine name, etc).
Program to decrypt the encryption key.
Program to decrypt encrypted data.
Hostname list to send the victim's data (redundancy).
Doesn't detected to antivirus programs (Date: 11/30/2020 12:25pm).
Hardcode image in base64 to change wallpaper (Baphomet image).
GIVE LIKES DON'T LEECH
very old mate 
This post is by a banned member (TONDA) - Unhide
08 June, 2021 - 02:12 PM
Reply
This post is by a banned member (adamlahfag) - Unhide
08 June, 2021 - 02:33 PM
Reply
(05 June, 2021 - 10:37 AM)Redm00n Wrote: Show MoreThis is a proof of concept of how a ransomware works, and some techniques that we usually use to hijack our files. This project is written in C# using the net-core application framework 3.1.The main idea of the code is to make it as readable as possible so that people have an idea of how this type of malware acts and works.
Baphomet features
AES algorithm for file encryption.
RSA encryption to encrypt key.
Automatic propagation via USB.
Hybrid encryption technique.
Enumeration of processes to kill those selected.
Internet connection test.
victim information submissions (Public IP, Domainname, Country, OS.version, City, Machine name, etc).
Program to decrypt the encryption key.
Program to decrypt encrypted data.
Hostname list to send the victim's data (redundancy).
Doesn't detected to antivirus programs (Date: 11/30/2020 12:25pm).
Hardcode image in base64 to change wallpaper (Baphomet image).
GIVE LIKES DON'T LEECH
thx i liked
|
