https://github.com/bitwise-01/thor
A Simple Ransomware
https://github.com/bitwise-01/thor
ransomware
Last synced: 8 months ago
JSON representation
A Simple Ransomware
- Host: GitHub
- URL: https://github.com/bitwise-01/thor
- Owner: Bitwise-01
- Created: 2019-11-12T03:19:11.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2024-01-05T18:01:03.000Z (over 2 years ago)
- Last Synced: 2025-04-09T20:44:57.881Z (about 1 year ago)
- Topics: ransomware
- Language: Python
- Homepage:
- Size: 34.2 KB
- Stars: 51
- Watchers: 5
- Forks: 17
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Thor
Thor is a ransomware.
It uses **RSA-2048** with **AES-128** to encrypt files.
## For educational purposes
> This software is **STRICTLY** for educational purposes.
### How to stay safe while playing with this code?
> **DO NOT** uncomment the lines within `payload/agent/lib/file_finder.py`
> By default, it will only encrypt files within a folder in your desktop named `Target_Folder`
> **Warning:** Do not run this code on your PC, use a VM instead. And If you do run it, let it run all the way.
## Notice:
> I will not be responsible for your actions.
> **DO NOT** touch this code if you lack self-control.
### For your protection
> For your own protection this ransomware will only encrypt files within a folder named `Target_Folder` within your desktop.
> You can tell it lock all files by uncommenting a few lines within `payload/agent/lib/file_finder.py`
### Requirements
- Python **3.6.x** | **3.7.x**
### Usage with a VM
1. Uncomment the commented out section of `payload/agent/lib/file_finder.py`
2. Generate server's public key pair `python thor.py`
3. Change directory into payload directory
4. Run the `encryptor_generator.py`
5. Infect your VM with the exe
6. Get the encrypted RSA private key that the exe outputs from your VM
7. Change directory back into payload directory
8. Run the `decryptor_generator.py` and give it the RSA keys
9. Send the decryptor.exe to the VM
10. Let the decryptor run and decrypt the files within your VM
### No sharing
Each time you generate an ransomware, you must generate a decryptor for that ransomware. You cannot generate one decryptor and use it with differently generated ransomware.
### Example usage
1. Install requirements
```
pip install -r requirements.txt
```
2. Generate server's public key pair
```
python thor.py
```
3. Change directory into payload & generate a ransomware
```
python encryptor_generator.py -b mybtcadress -a 120 -k ../server/keys/public.pem -n virus_danger
```
4. Change directory into payload & generate a decryptor
```
python decryptor_generator.py -sk ../server/keys/private.key -vk encrypted_private.ekey -n decryptor
```
# Disclaimer
```
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE. THIS SOFTWARE IS PURELY FOR EDUCATIONAL PURPOSES.
```