Kadavro Vector Ransomware v3 RaaS | Aes256-GCM (ChaCha20 combination) | E2ND ID

[130]

New update released
• System logs cleanup added
• Updated UAC bypass script to evade all AVs except ESET, and some EDR/XDRs (completely rewritten from scratch)
• Trial Decrypt function completely rewritten, with more complex handling of ACL attributes to make decryption key retrieval impossible
• Full low-level API interaction implemented
• Trial Decrypt now runs in the background, speeding up the decryption of large files
• File encryption function for all types/extension rewritten, with improved cryptographic strength and encryption speed
• Added leak protection for chat IDs/bot tokens/host links using AES, returning a base64 string with a 16-byte key/IV
• Added progress bar and indicator for files being decrypted in real-time
• Added comprehensive instructions for successful key retrieval and decryption
• Completely updated HTML page, with $ to XMR converter added
• Multi-tier manipulation of Privilege Tokens added for the following privileges:

• SeIncreaseQuotaPrivilege
  
• SeBackupPrivilege
  
• SeChangeNotifyPrivilege
  
• SeSystemtimePrivilege
  
• SeTimeZonePrivilege
  
• SeCreatePagefilePrivilege
  
• SeCreateGlobalPrivilege
  
• SeCreateSymbolicLinkPrivilege
  
• SeDebugPrivilege
  
• SeRemoteShutdownPrivilege
  
• SeImpersonatePrivilege
  
• SeIncreaseWorkingSetPrivilege
  
• SeIncreaseBasePriorityPrivilege
  
• SeLoadDriverPrivilege
  
• SeSecurityPrivilege
  
• SeSystemEnvironmentPrivilege
  
• SeDelegateSessionUserImpersonatePrivilege
  
• SeManageVolumePrivilege
  
• SeProfileSingleProcessPrivilege
  
• SeSystemProfilePrivilege
  
• SeUndockPrivilege
  
• SeRestorePrivilege
  
• SeShutdownPrivilege
  
• SeTakeOwnershipPrivilege
  

Working in private mode.

Contacts for rent:
My qTox ID - 0DF8A8515581B7BE24D2FC1F107AD38E20E6F26F6DF83E6C30AB49FF4707BD5720A0F4A38AB5

My Session ID - 05eca1eae9cd4c27373b635def91514bd682cddd3bcc26d1c857bbcff3c7d28624

Second developer n1k7:
Session ID - 052b804fe69983cef6346fbbcc14053d418b967faba357eebaa9166f203bb36266

Telegram - none and will not be, do not feed scammers and other scoundrels.

[130]

This is a bump

[245]

BUMP FOR MY FRIEND.

AFFORDABLE BUT POWERFUL AND LOW DETECTION CRYPT SERVICE, 0/26 on AVCHECK.NET GUARANTEE:
https://cracked.io/Thread-EchoCrypt-Prot...id37984886

 

Telegram: https://t.me/n1k7l

[130]

Please stop cluttering my inbox with messages claiming that Kadavro is a copy of Cash Ransomware.
Cash Ransomware is a modified version of Kadavro v2 that was not used in RaaS but rather for personal purposes.
Knowing the individual behind Cash Ransomware, I can confidently say that it will not be released as RaaS, as I have included a piece of amusing code that disrupts the functionality of the trial decrypt. Despite promises and anticipations about its release from the current code owner, there is a minor detail that the person behind Cash Ransomware overlooked.


As the saying goes, "Haste makes waste."

[130]

New client-requested  update released
• The contact information for obtaining the decryption key can now be accessed by scanning the QR code.
• When the QR code is clicked, the victim will have the option to download it.
• A QR code scanner page has been added, which operates without requiring external .dll files, and detailed instructions are provided.






Working in private mode.

Contacts for rent:
My qTox ID - 0DF8A8515581B7BE24D2FC1F107AD38E20E6F26F6DF83E6C30AB49FF4707BD5720A0F4A38AB5

My Session ID - 05eca1eae9cd4c27373b635def91514bd682cddd3bcc26d1c857bbcff3c7d28624

Second developer n1k7:
Session ID - 052b804fe69983cef6346fbbcc14053d418b967faba357eebaa9166f203bb36266

Telegram - none and will not be, do not feed scammers and other scoundrels.

[245]

BUMP FOR MY FRIEND!

AFFORDABLE BUT POWERFUL AND LOW DETECTION CRYPT SERVICE, 0/26 on AVCHECK.NET GUARANTEE:
https://cracked.io/Thread-EchoCrypt-Prot...id37984886

 

Telegram: https://t.me/n1k7l

[4]

I  hope this works :)

[1]

Hello, project still alive?