DeathRansom is a ransomware developed in python, with bypass technics, for educational purposes.
What is a ransomware?
A ransomware is malware that encrypts all your files and shows a ransom request, which tells you to pay a set amount, usually in bitcoins (BTC), in a set time to decrypt your files, or he will delete your files.
How it works?
First, the script checks if it’s in a sandbox, debugger, vm, etc, and try bypass it.
It then encrypts all files starting with the defined directory on the line 60 in deathransom.py.
Then, downloads the ransom request script, disable cmd, taskmanager and the registry tools. And starts the counter to delete the files.
How to use?
pip install -r requirements.txt
and python3 -m pip install PyQt5
python generate_key.py
pyinstaller --onefile --windowed <FILE>
pyinstaller --onefile --windowed main.py
Also Read – 5 Simple Ways to Hack Gmail Accounts 2020
Bypass Technics
How to edit the Ransom Request?
To edit, you need install the PySide2. Open the main.ui file, and edit what you want.
Demo Video
JBDev is a specialized development tool designed to streamline the creation and debugging of jailbreak…
The Kereva LLM Code Scanner is an innovative static analysis tool tailored for Python applications…
Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…
SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…
Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…
Cybersecurity tools play a critical role in safeguarding digital assets, systems, and networks from malicious…