Chaos Ransomware Builder V4 - Cleaned by ObbedCode

[sysadmin3322]

Fnnally i got it thnk

[subm3tric]

 

To clean the file we have to rename a .DLL to .EXE and modify some sus IL Code.

Removed the Original .exe that is just a virus

 

Note I cleaned the File, You Can analyze the file for yourself in DnSpy

Still Run everything in a Controlled Environment. My version is the Fully Cleaned Version.

 

 Even has the Decryptor in the same Folder

  

Person Spreading Malware:

Spoiler

 

Original Report:

 

Spoiler

 

Please Login or Register to see this Hidden Content

Please Login or Register to see this Hidden Content

 

 

===================================================================

DOWNLOAD

===================================================================

Password: Chaos46366

Upload.ee

 

 

Anonfile

 

 

Zippyshare

 

 

Mirror Ace

 

 

===================================================================

SCREENSHOTS

===================================================================

 

Spoiler

 

Original Analysis:

(Still always run EVERYTHING in Sandbox / Virtual Machine)

 

Stub SRC:

Please Login or Register to see this Hidden Content

 

VT:

Please Login or Register to see this Hidden Content

HB:

Please Login or Register to see this Hidden Content

 

Please Login or Register to see this Hidden Content

 

 

 

Thank you
 

[bmshifat]

thanks

[BoringSunday]

always Rock

[appleinc4531]

Thanks for sharing

[MECORROXD]

k ricooo

[Thepotatogulp]

f

[nanitski]

etls ese

[burnerboy69]

ok

[Buds01335]

thx