ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!

Jump to content



Photo

Chaos Ransomware Builder V4 - Cleaned by ObbedCode


  • Please log in to reply
Chaos Ransomware Builder V4 - Cleaned by ObbedCode

#21

pooponme691
pooponme691
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 2
Threads: 0
Joined: Dec 08, 2022
Credits: 0
One year registered
#21

o dam wow very nice HQ uploads


  • 0

#22

buzziee
buzziee
    Offline
    0
    Rep
    6
    Likes

    Veteran

Posts: 493
Threads: 8
Joined: Apr 27, 2022
Credits: 0
Two years registered
#22

thankss


  • 0

#23

Agent27
Agent27
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 9
Threads: 0
Joined: Dec 16, 2022
Credits: 0
One year registered
#23

Thank you.


  • 0

#24

smoooH3X
smoooH3X
    Online
    0
    Rep
    0
    Likes

    Member

Posts: 64
Threads: 0
Joined: Aug 26, 2022
Credits: 0
One year registered
#24

ty for this ransomware, what a leak


  • 0

#25

pulalungageorg
pulalungageorg
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 5
Threads: 0
Joined: May 26, 2022
Credits: 0
One year registered
#25

To clean the file we have to rename a .DLL to .EXE and modify some sus IL Code.

Removed the Original .exe that is just a virus :(

 

Note I cleaned the File, You Can analyze the file for yourself in DnSpy

Still Run everything in a Controlled Environment. My version is the Fully Cleaned Version.

 

 Even has the Decryptor in the same Folder

  

Person Spreading Malware:

Spoiler

 

Original Report:

 

Spoiler

 

===================================================================

DOWNLOAD

===================================================================

Password: Chaos46366


Upload.ee

 

Anonfile

 

Zippyshare

 

Mirror Ace

 

===================================================================

SCREENSHOTS

===================================================================

 

Spoiler

 

Original Analysis:

(Still always run EVERYTHING in Sandbox / Virtual Machine)

 

Stub SRC:

Please Login or Register to see this Hidden Content

 

VT:

Please Login or Register to see this Hidden Content

HB:

Please Login or Register to see this Hidden Content

 

Please Login or Register to see this Hidden Content

Thanks for sharing

  • 0

#26

Jogetbang123
Jogetbang123
    Offline
    0
    Rep
    0
    Likes

    New Member

Posts: 17
Threads: 0
Joined: Oct 23, 2022
Credits: 0
One year registered
#26

nice stuff


  • 0

#27

Developeur13
Developeur13
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 1
Threads: 0
Joined: Dec 19, 2022
Credits: 0
One year registered
#27

hello guy how is going on?


  • 0

#28

alivemealone
alivemealone
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 6
Threads: 0
Joined: Dec 18, 2022
Credits: 0
One year registered
#28

Thanks for cleanin up the scum off xD


  • 0

#29

Jorgan53
Jorgan53
    Offline
    0
    Rep
    0
    Likes

    Member

Posts: 57
Threads: 0
Joined: Dec 19, 2022
Credits: 0
One year registered
#29

 

To clean the file we have to rename a .DLL to .EXE and modify some sus IL Code.

Removed the Original .exe that is just a virus :(

 

Note I cleaned the File, You Can analyze the file for yourself in DnSpy

Still Run everything in a Controlled Environment. My version is the Fully Cleaned Version.

 

 Even has the Decryptor in the same Folder

  

Person Spreading Malware:

Spoiler

 

Original Report:

 

Spoiler

 

===================================================================

DOWNLOAD

===================================================================

Password: Chaos46366


Upload.ee

 

 

Anonfile

 

 

Zippyshare

 

 

Mirror Ace

 

 

===================================================================

SCREENSHOTS

===================================================================

 

Spoiler

 

Original Analysis:

(Still always run EVERYTHING in Sandbox / Virtual Machine)

 

Stub SRC:

Please Login or Register to see this Hidden Content

 

VT:

Please Login or Register to see this Hidden Content

HB:

Please Login or Register to see this Hidden Content

 

Please Login or Register to see this Hidden Content

 

ty


  • 0

#30

wolfdream308
wolfdream308
    Offline
    0
    Rep
    1
    Likes

    Member

Posts: 33
Threads: 0
Joined: Nov 13, 2022
Credits: 0

One year registered
#30

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;


  • 0


 Users browsing this thread: