(This post was last modified: 3 hours ago by blackw0tch. Edited 1 time in total.)
Ransomware for Windows (x64).
  • Written on Golang, works great on Windows 7, 8.1, 10, 11.
  • Native, without dependencies.
  • There is a Telegram-bot for management and web control panel.
  • Dynamic analysis evasion using Process Hollowing. I can send a new build by request. Also I can send you a raw build without cryptor.
  • Encryptor/decryption key is not present in an EXE and generated in a server.
  • Every unique build is connected with a user (buyer).
User can set the following parameters:
  • Payment sum for data decryption
  • Contact e-mail of user
  • USDT wallet address (trc20)
  • Program name
  • Instruction name
  • Instruction text
  • Extension of encrypted file
  • Extensions of files which ransomware needs to encrypt
  • Recovery key for free decryption
Price: 10$ per month.

Contact: TG  @elonmascc