has anyone tried?
Chaos Ransomware Builder V4 - Cleaned by ObbedCode
#54
Posted 25 March 2023 - 10:49 AM
To clean the file we have to rename a .DLL to .EXE and modify some sus IL Code.
Removed the Original .exe that is just a virus
Note I cleaned the File, You Can analyze the file for yourself in DnSpy
Still Run everything in a Controlled Environment. My version is the Fully Cleaned Version.
Even has the Decryptor in the same Folder
Person Spreading Malware:
Spoiler
Original Report:
Spoiler
===================================================================
DOWNLOAD
===================================================================
Password: Chaos46366
Upload.ee
Anonfile
Zippyshare
Mirror Ace
===================================================================
SCREENSHOTS
===================================================================
Spoiler
Original Analysis:
(Still always run EVERYTHING in Sandbox / Virtual Machine)
Stub SRC:
VT:
HB:
Thanks Bro
#56
Posted 27 March 2023 - 10:54 AM
#57
Posted 30 March 2023 - 05:42 PM
To clean the file we have to rename a .DLL to .EXE and modify some sus IL Code.
Removed the Original .exe that is just a virus
Note I cleaned the File, You Can analyze the file for yourself in DnSpy
Still Run everything in a Controlled Environment. My version is the Fully Cleaned Version.
Even has the Decryptor in the same Folder
Person Spreading Malware:
Spoiler
Original Report:
Spoiler
===================================================================
DOWNLOAD
===================================================================
Password: Chaos46366
Upload.ee
Anonfile
Zippyshare
Mirror Ace
===================================================================
SCREENSHOTS
===================================================================
Spoiler
Original Analysis:
(Still always run EVERYTHING in Sandbox / Virtual Machine)
Stub SRC:
VT:
HB:
oldie but goodie the decrypter might be a virus tho...
Users browsing this thread: